Try our new research platform with insights from 80,000+ expert users

ManageEngine ADManager Plus vs One Identity Active Roles comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jul 9, 2024
 

Categories and Ranking

ManageEngine ADManager Plus
Ranking in Active Directory Management
1st
Average Rating
8.2
Number of Reviews
14
Ranking in other categories
No ranking in other categories
One Identity Active Roles
Ranking in Active Directory Management
5th
Average Rating
8.6
Number of Reviews
17
Ranking in other categories
User Provisioning Software (5th)
 

Mindshare comparison

As of September 2024, in the Active Directory Management category, the mindshare of ManageEngine ADManager Plus is 13.3%, down from 15.0% compared to the previous year. The mindshare of One Identity Active Roles is 7.4%, down from 9.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Active Directory Management
 

Featured Reviews

ManishMehta - PeerSpot reviewer
Dec 13, 2023
Validates every activity and helps to delegate access management
I use ManageEngine ADManager Plus for auditing.  The solution helps us with access delegation. It keeps our footprint in the Active Directory small, making it easier to watch over and secure. This is good for cybersecurity, helping us track changes and daily checks on who's doing what in our…
LA
Jul 12, 2023
Give us control over attributes a service desk analyst can change, and we can build in integrity rules
The Group Family feature is okay, but there are some issues around its use for creating objects automatically, based on HR attributes. Another issue is that it doesn't look like the hybrid connections are particularly mature. We haven't really used it much. We have a couple of guys setting it up who don't really like the way it's working. It uses a synchronization tool to do that. Native integration with the cloud would be better. Also, we're trying to manage Office 365 mailboxes and although it will create a mailbox in the cloud, it won't do shared mailboxes. That means we're having to write custom solutions for that. Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up. Some of their built-in functions will work off of both servers and I don't see why this shouldn't as well. Another similar gripe is that when you run custom Active Roles policies, they'll actually trigger on both hosts, not on one. In that scenario, it would be better if they would trigger on one host, unless it wasn't available. For example, if you're writing to the event log, you have a custom task and it will show up multiple times because it's being processed by multiple front-end hosts.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It is a stable solution."
"The most valuable feature for me is automation."
"Almost every feature of the solution is valuable to me. This includes the importing and exporting to the active directory from the CSC firewall."
"It makes our job easier, especially for managing data for a bulk of users."
"Makes it easy to administer your active directory."
"The most valuable feature was conducting the automation of our cloud and all services of the Active Directory."
"The most valuable features of the solution are its ease of use, the ability for us to customize the access privileges for the users, and integration with ServiceDesk Plus."
"The product helps to validate every activity."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"In comparison to native Active Directory tools, using Active Roles for delegation is so much better. It uses an access template and that makes it easy to see who can access what. In fact, you can do that for many objects as well."
"The solution is stable."
"The AD and AAD management features of this solution are really good... They offer added value by showing more fields such as password age and the statuses of some things that we normally wouldn't see."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"It gives us attribute-level control and the AD management features work very well."
"Secure access is the most valuable feature."
 

Cons

"The product's price is an area of concern where improvements can be introduced by making it available at a cheaper rate."
"Some things are not very intuitive."
"The solution should be made tablet friendly because it works well on iPhones and Android phones, but does not work on tablets."
"API integrations are not supported for all HR tools."
"There is room for improvement in support, they should work on overall competence and turn-around time."
"The solution is very complex, especially when there's an active directory of more than 1,000 users, which makes it hard to administrate. They need to improve the management of the administrative process."
"The number of main controllers affects the database for creating the hardware specs."
"I think the cost of this product is a little higher than I would expect."
"The solution needs an attestation process that includes certification and recertification attestation."
"There are some features that we think should be included in their next release. We think these things would take them to the next level: the ability to completely force or limit any dynamic group processing to specific servers, change-tracking reporting of virtual attributes, and the ability to use files as inputs to automation workloads. These things have also been talked about. Knowing them, they're probably working on them."
"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work. For example, there is a "Find" function that you need set up in a workflow to do some of the automation. It is not the easiest to get a result from those finds when you're trying to do that. In the MMC, they have a couple different types of workflows. In this particular case, we use their workflow functionality to find all of X within the environment, then if you find it, do X, Y, and Z. You can have multiple steps. When you do that search function within that workflow, it's really hard to find out, "Is my search working?" It would be nice if there was some feedback on the screen so you could see if your search is working properly within the workflow."
"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."
"Most of the time it just works."
 

Pricing and Cost Advice

"I am satisfied with the solution’s pricing."
"I downloaded the trial version, only."
"The cost of this product is a little higher than I would expect for a tool like this."
"It is not expensive."
"The pricing depends on scope and makes sense for use cases with multiple domains."
"The tool's pricing is good."
"I need to pay for the license, and I believe that it could be made cheaper."
"The licensing model is a simple user-based model, not that much complicated."
"The price is reasonable. It costs us about 1 million Danish kroner annually, and we also spend about half as much on consultants."
"It's expensive."
"It's fairly priced."
"The pricing is on the higher end."
report
Use our free recommendation engine to learn which Active Directory Management solutions are best for your needs.
801,314 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
10%
Manufacturing Company
8%
Government
8%
Computer Software Company
16%
Financial Services Firm
11%
Healthcare Company
9%
Government
9%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What is your experience regarding pricing and costs for ManageEngine ADManager Plus?
I need to pay for the license, and I believe that it could be made cheaper.
What needs improvement with ManageEngine ADManager Plus?
ManageEngine ADManager Plus is capable of everything. The product's price is an area of concern where improvements can be introduced by making it available at a cheaper rate. The support should be ...
What is your experience regarding pricing and costs for One Identity Active Roles?
The solution is fairly priced. That said, I have nothing to compare it to.
What needs improvement with One Identity Active Roles?
The solution has not enabled us to reduce password reset times. It has not automated provisioning. The group attestation could be improved. It was a feature that was available in version 5. You can...
 

Also Known As

No data available
Quest Active Roles
 

Overview

 

Sample Customers

Information Not Available
City of Frankfurt, Moore Public Schools, George Washington University, Transavia Airlines, Howard County, MD. See all stories at OneIdentity.com/casestudies
Find out what your peers are saying about ManageEngine ADManager Plus vs. One Identity Active Roles and other solutions. Updated: July 2024.
801,314 professionals have used our research since 2012.