One Identity Active Roles

What One Identity Active Roles is

One Identity Active Roles brings administration of Microsoft Active Directory, Entra ID and Microsoft 365 into a single console. Workflow automation helps teams apply and enforce consistent policies across those environments. For account lifecycle management, automation and scripting support least-privilege access. Role-based access control lets administrators delegate specific permissions across Active Directory domains and Entra ID and Microsoft 365 tenants. Change history and activity tracking provide information for audits and remediation.

Active Roles lists integrations with One Identity Manager, Safeguard Authentication Services, Defender, Change Auditor, GPO Admin, Password Manager and Starling Connect. Its listed capabilities include delegated administration, AD auditing, lifecycle automation and reporting. Password self-service is not included in the listed feature set.

The product supports web, iOS and Android, as well as self-hosted virtual or physical appliances. Its installation guide covers requirements for an on-premises environment. Active Roles is paid, with a license required for legal use; the license fee depends on the number of managed users, and a quotation is available from One Identity. A free plan is not offered, but the product page offers a free trial and a virtual trial. One Identity is headquartered in Cork, Ireland, and was founded in 2007.

Who it suits

Active Roles suits organizations administering Microsoft Active Directory, Entra ID and Microsoft 365 that need centralized controls, delegated access and activity tracking. It is also a fit for teams seeking automated lifecycle management and reporting, provided they are prepared to license the product.

Limits

There is no free plan. Legal use requires a purchased license, with the fee based on the number of managed users.

Getting started

1. Visit the Active Roles product page.
2. Choose the free trial or virtual trial offered on the product page.
3. Review the installation guide's requirements for an on-premises environment if self-hosting.
4. Contact the One Identity account team for a license quotation.

Verdict

Choose Active Roles if your organization needs to govern Active Directory, Entra ID and Microsoft 365 through shared administration, automation and delegated access. Consider another option if password self-service is a requirement or you need a free plan.