Skip to content

DOCS-2691 / 26 / DOCS-2691 Add Exposure to the Allow Directory Services users to acce… (by micjohnson777) #4788

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tonyriv3 merged 2 commits into from
Sep 9, 2026
Merged

DOCS-2691 / 26 / DOCS-2691 Add Exposure to the Allow Directory Services users to acce… (by micjohnson777) #4788

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ac935c4
DOCS-2691 Add Exposure to the Allow Directory Servicees users to acce…
micjohnson777 Sep 2, 2026
e335e79
Merge branch '26' into DOCS-2691-26
tonyriv3 Sep 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions content/Credentials/AdminRoles.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -136,6 +136,26 @@ To use two-factor authentication with an administrator account, configure and en
If you have the root user configured with a password and it is enabled, you can SSH into the system as the root user.
Disable the root user password and only use a local administrator account for more security.

## Allowing Directory Service Users WebUI Access

{{< enterprise >}}
Enterprise-licensed systems include the **Allow Directory Service users to access WebUI** option on the **System > Advanced Settings > Access Settings** configuration screen.

To configure this access, first add the selected AD users to a group that is granted a TrueNAS privilege that permits it, then enable the **Allow Directory Service users to access WebUI** option on the **Access Settings** screen. This option only shows on Enterprise-licensed systems.

{{< trueimage src="/images/SCALE/SystemSettings/AccessSettingsScreenEnterprise.png" alt="Access Settings Screen Enterprise Systems" id="Access Settings Screen Enterprise Systens" >}}

After TrueNAS joins AD, it automatically creates a new privilege entry in the **Privileges** screen table, and this privilege is automatically populated with the domain admins group for the domain.
For example, if the domain is *ad03.mydomain.net*, then you should see a group of that name listed as well as any of the groups AD creates on the system.
You can edit this privilege by selecting the table row and clicking **Edit**.
Never modify the settings for the standard pre-defined privileges (listed below)! Changing these pre-defined roles can result in lost access to the UI!

Pre-defined TrueNAS privileges are:
* **Read-Only Administrator** - Allows the user to view settings but not make changes in the UI.
* **Sharing Administrator** - Allows the user to create new shares and the share dataset.
* **Local Administrator** - Gives full control (read/write/exeute permissions) to the user.
{{< /enterprise >}}

## Administrator Logins and TrueCommand

Administrator logins work with TrueCommand, but you need to set up the TrueNAS connection using an [API key]({{< ref "ManagingAPIKeys" >}}).
5 changes: 5 additions & 0 deletions content/Credentials/DirectoryServices/ConfigAD.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,6 +31,11 @@ Joining an AD domain also configures the Privileged Access Manager (PAM) to let

Users can configure AD services on Windows or Unix-like operating systems using [Samba version 4](https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Provisioning_a_Samba_Active_Directory).

{{< hint type=tip title="Allowing Directory Service Users WebUI Access" >}}

Enterprise-licensed systems include the **Allow Directory Service users to access WebUI** option on the **System > Advanced Settings > Access Settings** configuration screen. For more information on how to configure this, see [Allowing Directory Service Users WebUI Access]({{< ref "AdminRoles" >}})
{{< /hint >}}

### Preparing to Configure AD in TrueNAS

Before configuring Active Directory (AD) in TrueNAS:
Expand Down
Loading