Most Helpful Review
Find out what your peers are saying about One Identity Active Roles vs. One Identity Manager and other solutions. Updated: January 2020.
396,781 professionals have used our research since 2012.
We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
Having a tool to manage all changes to AD from a single pane of glass is awesome.
The provisioning and deprovisioning saves a lot of time and skips a lot of errors.
It gives us attribute-level control and the AD management features work very well.
It's valuable to us in that it resembles the native tools that most people have grown accustomed to... Active Roles resembles traditional tools, such as from Microsoft. That is really good because it eases the way people interact with the tool.
The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see.
The short version is that we gained significant insight into the issues of access governance. This allowed us to turn an auditing nightmare into praise from our auditors.
It gives the best user experience, enabling us an overview of all user entitlements.
This solution is better on the IT personnel, because now they spend less (or almost no time) managing user rights.
The most valuable feature for me is the built-in security, which is the best that I have seen.
The connection with multiple systems is what makes it flexible. We can create the accounts flexibly, enabling access to other systems. In addition to Active Directory, it can extend to SAP, to Salesforce, to Office 365, etc.
Nobody has to put people in AD groups by hand anymore. It goes automatically and that's very good. It's also very flexible. It's quite easy to customize and we have customized it a lot.
For me, personally, the automation is the most valuable feature. I don't have to do things manually, like creating user accounts and provisioning them to the target systems.
This is almost a complete solution for us.
The ability to send logs to a SIEM would be very beneficial.
For the AAD management feature, it needs to improve the objects that we can manage and the security.
Most of the time it just works.
It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch.
The support team could be improved on. The first level of support essentially looks up knowledge base articles and often can't provide the answer needed.
The initial setup was complex. We have a lot of different systems. The journey from implementing to joining all the systems was difficult.
The performance could use improvement. Sometimes synchronizations take too long.
A feature that I would like to see is a mobile app that provides users the ability to make changes or add users to the Active Directory, on the fly.
More integration with SAP and with the internet of things would be good. We also have system devices that we could manage as identities, so that would be a feature to add.
One of the things we would like is the ability to have more than one system role manager. That would be nice. For example, when people are on vacation, sometimes it gets a little hard to administrate system roles.
The system role manager, or some of the roles that are inside Identity Manager, are limited to one user. It would be more flexible if these responsibility roles could be attached to many people.
It should be able to give a client version of the product, rather than just a web-portal.
Pricing and Cost Advice
Information Not Available
There is a one-time licensing cost, and there is also a yearly subscription fee.
It's costlier that some other products, and there is nothing that fits every solution.
We are using a self-built solution. It would cost too much to get that up to the standard of what we need. In the long-term, it is cheaper to buy a solution that has what we need. Though, we are still running the previous solution, as we are still in the implementation phase.
It needs flexibility in the licensing or packaging, because you buy the entire package at once, and sometimes the customers are a bit overwhelmed with whatever they get. I would like if they could cut the licensing or packaging into somewhat smaller things.
It has helped to reduce customer costs.
We are paying for premium support, which is expensive. However, we do receive very good, fast support.
It helps us save on licenses for applications because we are following the account lifecycle, as well as account reactivation.
We have the premium support and are very satisfied. They are always answer our questions very quickly. For the moment, we are very satisfied, but I think it's because we are paying for the premium support.
out of 37 in User Provisioning Software
Average Words per Review
out of 37 in User Provisioning Software
Average Words per Review
Compared 33% of the time.
Compared 24% of the time.
Compared 10% of the time.
Compared 18% of the time.
Compared 16% of the time.
Compared 9% of the time.
Also Known As
|Quest Active Roles||Quest One Identity Manager, Dell One Identity Manager|
|One Identity||One Identity|
Active Roles is a single, unified and rich tool to automate the most troublesome user and group management tasks. With One Identity Active Roles, you can streamline user and group administration, solve security issues – and meet those never-ending compliance requirements by managing and securing on-prem, and cloud AD resources simply and efficiently with a single, intuitive solution.
One Identity Manager helps you mitigate risk, secure data, meet uptime requirements and satisfy compliance by giving your users access to data and applications they need and nothing more. IAM can be driven by business needs, not IT capabilities. With Identity Manager, you can manage user identities, privileges and security across the enterprise, putting you in control of identity management and taking the burden off your IT staff.
Learn more about One Identity Active Roles
Learn more about One Identity Manager
|City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies||Texas A&M, Sky Media, BHF Bank, Swiss Post, Union Investment, Wayne State University. More at OneIdentity.com/casestudies|
Comms Service Provider19%
Software R&D Company18%
Financial Services Firm15%
Financial Services Firm36%
Software R&D Company29%
Comms Service Provider12%
Financial Services Firm9%