We performed a comparison between Netwrix Auditor and One Identity Active Roles based on real PeerSpot user reviews.
Find out in this report how the two Active Directory Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."
"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."
"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."
"I am impressed with the tool's reporting feature and notifications."
"Netwrix provides features that no other solution on the market does."
"The most valuable feature is the real-time monitoring."
"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."
"Having a tool to manage all changes to AD from a single pane of glass is awesome."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"It provides automatic provisioning/update/deprovisioning workflows from a source system to a target system."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"With the use of the sync service we were able to import information from multiple external systems and populate them within our space and leverage them for downstream systems."
"The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"The Linux compatibility of this solution could be improved."
"There is room for improvements when it comes to the licensing."
"There is room for improvement with the introduction of AI functionality."
"If you buy direct, there is a minimum of 150 licenses that must be procured. The price point and barrier of entry is a little bit higher than it would be if you purchased the solution from an authorized reseller partner, rather than buying it and managing yourself."
"When there are issues I would like remediation to be in one place."
"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."
"The solution lacks self-service on password reset. It also needs to improve its scalability."
"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."
"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."
"Most of the time it just works."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work. For example, there is a "Find" function that you need set up in a workflow to do some of the automation. It is not the easiest to get a result from those finds when you're trying to do that. In the MMC, they have a couple different types of workflows. In this particular case, we use their workflow functionality to find all of X within the environment, then if you find it, do X, Y, and Z. You can have multiple steps. When you do that search function within that workflow, it's really hard to find out, "Is my search working?" It would be nice if there was some feedback on the screen so you could see if your search is working properly within the workflow."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up."
"For the AAD management feature, it needs to improve the objects that we can manage and the security."
Netwrix Auditor is ranked 2nd in Active Directory Management with 7 reviews while One Identity Active Roles is ranked 4th in Active Directory Management with 17 reviews. Netwrix Auditor is rated 9.2, while One Identity Active Roles is rated 8.6. The top reviewer of Netwrix Auditor writes "Can track every admin action in large environments and includes AI modules to detect and prevent unauthorized changes". On the other hand, the top reviewer of One Identity Active Roles writes "Single interface and workflows simplify AD and Azure AD management efficiency and security". Netwrix Auditor is most compared with Quest Change Auditor for Active Directory, Lepide, ManageEngine ADAudit Plus, SolarWinds Access Rights Manager and ManageEngine ADManager Plus, whereas One Identity Active Roles is most compared with Microsoft Entra ID, ManageEngine ADManager Plus, SailPoint Identity Security Cloud and One Identity Manager. See our Netwrix Auditor vs. One Identity Active Roles report.
See our list of best Active Directory Management vendors.
We monitor all Active Directory Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.