hello,

im an intranet developer for a big company that uses AD. i am used to created SQL tables in my application's db that store Roles, and Users, and UserRoles. then i write UI for admins to add/edit/remove those roles to the users.

today i came across the microsoft ADAM tool:

 http://msdn.microsoft.com/en-us/library/ms998331.aspx

...how good of a solution is this for role management? why would one use ADAM over, say, ActiveDirectoryMembershipProvider?

any thoughts, comments, or warnings are welcomed.

thanks!
matt
 

I haven't worked with the combination ADAM + AzMan myself, only AzMan with Active Directory. But my experience with AzMan is positive. It will give you the opportunity do define complex permission structures without one line of code. Also what's good is that your customer can use it easily, and you don't have to build an admin interface for managing roles and permissions. It's already there.

I guess one scenario in which you might choose ADAM in favor of AD can be when you're on a DMZ and you cannot access the AD directly.

There's a guy who seems to be pretty familiar with the concept of ADAM/AzMan. If you check with him, he might be able to help you out. See http://www.cauldwell.net/patrick/blog/CategoryView,category,ADAM.aspx

Good luck! Please post in this thread if you find anything interesting!

I found a case study on Microsoft from a real project where ADAM and AzMan was used. Very interesting reading!

http://www.microsoft.com/casestudies/casestudy.aspx?casestudyid=1000003686