Skip to main content

Cornell University

Create a Guest-Only Group (CornellAD)

This article applies to: Group Management , GuestIDs

On This Page

In order to enable the self-request process for GuestIDs or on-demand GuestID creation process, you must create a Guest-Only group in CornellAD. When a guest requests an ID, they will automatically become a member of this group. For example below, we will call our Guest-Only group OIT-guests.

Guest-only groups can only be created by the primary OU Admin. Only primary OU admins can modify the "flags" attribute that converts a normal group into a guest-only group.

One step in creating this Guest-Only group is specifying who reviews and approves or rejects these requests. Before you complete the steps listed below you must first either

  • identify an existing group with the NetIDs of the people you want as reviewers

OR

  • create a group and populate it with the NetIDs of the people you want as reviewers

THEN

  • make sure that this group is part of the prefix-subdelegates-gs group (substituting your OU prefix) in your unitobjects OU.

For the example below, we will call our group of reviewers OIT-guest-reviewers.

You will need the name of this group (of reviewers) in order to create the Guest-only group.

Using the ARS Console

  1. Using the Quest ARS Console, create a group in the UnitObjects OU in your unit's OU. This will be your new Guest Only group. In our example, we're calling this OIT-guests.
  2. Right-click on your new group, then select Properties from the menu that appears.
  3. Click the Managed By tab.
  4. On the Managed By tab, under Name, click Change.
  5. Add the group with the approvers' NetIDs (the one we're calling OIT-guest-reviewers). Click OK when finished.
    (All the NetIDs in this group should have their mail attribute populated.)
  6. Back on the Properties dialog box, click the Object tab.
  7. Click Advanced Properties.
  8. Click to put a check next to Show all possible attributes and Include attributes with empty values.
  9. Scroll down to the flags attribute.
  10. Double-click flags.
  11. In the View Attribute dialog box, for Value enter 1.
    (That's the numeral one, all by itself, no quotes or punctuation.)
  12. Click OK (three times) to close the View Attribute dialog box, the Advanced Properties dialog box, and the Properties dialog box.

When your guests self-request, they'll need to specify the Guest-Only group you just created. See our Explain to Guests article for details.

Once a guest has requested a GuestID and that request has been approved, they automatically become a member of this group. You can then, as appropriate, add them to any other group you manage.

Please note that a seven-day countdown starts when a guest sends the request for a GuestID. The guest must confirm their request (by following the instructions in the email message they receive) and a reviewer must approve the request within that seven days, or the GuestID will be deleted.

Using the Web Interface

  1. In the web interface, navigate to your unit's UnitObjects OU and create a new group. This will be your new Guest Only group. In our example, we're calling this OIT-guests.
  2. Immediately after creating this new group, you will be shown the group's General Properties, with the General tab selected. If not, navigate to the group, click on it, select General Properties from the drop-down list at the top of the window, then click the General tab.
  3. In the Flags field (near the bottom of the window, you may need to scroll down), enter 1.
    (That's the numeral one, all by itself, no quotes or punctuation.)
  4. Click Save.
  5. Click the Managed by tab.
  6. On the Managed By tab, under Manager, click Change.
  7. Add the group with the approvers' NetIDs (the one we're calling OIT-guest-reviewers). Click OK when finished.
    (All the NetIDs in this group should have their mail attribute populated.)
  8. Back on the Managed by tab, click Save.

When your guests self-request, they'll need to specify the Guest Only group you just created. See our Explain to Guests article for details.

Once a guest has requested a GuestID and that request has been approved, they automatically become a member of this group. You can then, as appropriate, add them to any other group you manage.

Please note that a seven-day countdown starts when a guest sends the request for a GuestID. The guest must confirm their request (by following the instructions in the email message they receive) and a reviewer must approve the request within that seven days, or the GuestID will be deleted.

Comments?

To share feedback about this page or request support, log in with your NetID

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.