{"id":245,"date":"2026-04-01T10:03:32","date_gmt":"2026-04-01T09:03:32","guid":{"rendered":"https:\/\/overlaps.co.uk\/docs\/?page_id=245"},"modified":"2026-04-01T10:18:12","modified_gmt":"2026-04-01T09:18:12","slug":"add-a-new-user-or-group","status":"publish","type":"page","link":"https:\/\/overlaps.co.uk\/docs\/overlaps-documentation\/configuration\/users-and-groups\/add-a-new-user-or-group\/","title":{"rendered":"Add a New User or Group"},"content":{"rendered":"\n

To add a user, click the New User\/Group<\/strong> button, a window will appear allowing you to enter the user or group\u2019s account (user) name.<\/p>\n\n\n\n

\"Window
Adding a New User<\/figcaption><\/figure>\n\n\n\n

Start typing the username and OVERLAPS will search Active Directory for potential matches for you to select from.<\/p>\n\n\n\n

\""Add
Add a New User\/Group Auto-suggest<\/figcaption><\/figure>\n\n\n\n

Here you may also set the user or group\u2019s site-wide permissions, which consist of:<\/p>\n\n\n\n

Edit Settings<\/h2>\n\n\n\n

Users with this permission are full Administrators<\/strong> have permission to everything in OVERLAPS. They are the only ones who can add or remove users, grant permission to OUs, and change the various system settings.<\/p>\n\n\n\n

\n

Warning:<\/strong> This allows the user full access to everything in OVERLAPS, including the ability to grant access to the LAPS password of any computer in the domain, including servers, to any other domain user.<\/p>\n<\/blockquote>\n\n\n\n

Edit Self-Service<\/h2>\n\n\n\n

Users with “Edit Self-Service” permission have permission to add, edit and remove computers from another user or group’s Self-Service settings. This allows this user\/group to grant access to LAPS passwords for ALL computers, including servers.<\/strong><\/p>\n\n\n\n

View History<\/h2>\n\n\n\n

Users with the View History permission can access the History page and view a log of everything that other users are doing within OVERLAPS.<\/p>\n\n\n\n

View Computer Reports<\/h2>\n\n\n\n

If enabled, users will be able to run Computer Reports such as retrieving a list of computers that don’t have a LAPS password.<\/p>\n\n\n\n

Set a Precise Expire Date & Time<\/h2>\n\n\n\n

If enabled, this user\/group can specify a date and time when expiring a computer\u2019s password (instead of just expiring immediately).<\/p>\n\n\n\n

Allow Browsing Active Directory<\/h2>\n\n\n\n

If not allowed, the user(s) is will not be able to browse Active Directory containers even if they have permission to do so. Their only means of accessing a computer that they have permission to is by searching for it.<\/p>\n\n\n\n

Note that this is not required for users that don’t have OU-level permission to access computers (e.g. Self-Service users). It is only intended for situation where you want to grant access to all of the devices in one or more OUs, but only want them to access them through the Search form.<\/p>\n\n\n\n

Enabling this for Self-Service-only users can cause unexpected outcomes such as showing a “permission denied” error when logging on rather than being taken directly to their owned devices.<\/p>\n\n\n\n

\n

Unless you have a very specific use-case for this feature, it is recommended to leave it Enabled<\/strong>.<\/p>\n<\/blockquote>\n\n\n\n

Allow Viewing the Password of Deleted Devices<\/h2>\n\n\n\n

Requires View Computer Reports permission and the Password History feature to be enabled<\/p>\n\n\n\n

If enabled, all devices that the user has permission to read passwords for (via OU permissions) will be accessible from the Password History report. This includes devices that have been deleted from Active Directory, so it can be useful for gaining access to devices which have dropped out of the domain for one reason or another.<\/p>\n\n\n\n

Note that this setting is currently only available from the Edit User Access Levels window, not from the Add User window.<\/p>\n","protected":false},"excerpt":{"rendered":"

To add a user, click the New User\/Group button, a window will appear allowing you to enter the user or group\u2019s account (user) name. Start typing the username and OVERLAPS will search Active Directory for potential matches for you to select from. Here you may also set the user or group\u2019s site-wide permissions, which consist […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":63,"menu_order":100,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-245","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/comments?post=245"}],"version-history":[{"count":3,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/245\/revisions"}],"predecessor-version":[{"id":269,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/245\/revisions\/269"}],"up":[{"embeddable":true,"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/pages\/63"}],"wp:attachment":[{"href":"https:\/\/overlaps.co.uk\/docs\/wp-json\/wp\/v2\/media?parent=245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}