If customers have any questions regarding the permissions for Active Directory within DCV or XVCapture you can send them The Apteryx Users Guide
AD Designations
CN– Common Name
DC– Domain component
DN– Distinguished Name
OU– Organizational Unit
Active Directory Permissions
Access Application Preferences – Allows the user to access the application preferences through the Advanced User Tools menu.
Allow manual data entry when requiring bridge patient information – Allows the user to manually enter patient data even if the requirement is that the patient data must be bridged. (This will more than likely not be relevant to your configuration.)
Calibration Management – Allows the user to calibrate measurements.
Capture Images – Allows the user to capture images.
Data Correction: (Data Correction must be enabled for any of these options.)
There are several options lister under Data Correction. The Data Correction Options are defined as followed:
-
Image Info – Information pertaining to the image itself. (Teeth numbers)
Image Ops – Changing the Image. (Rotating)
Patient – Changing the patient information, including changing the information to send the image to a different patient.
Taken Dates – Changing the listed Date of when the image was taken.
Export/Copy – Allows the user to Export the images.
Image Deletion – Allows the user to delete images.
Image Type Changes – Allows the user to make classification changes to Ghosted Images, primary Images, and Retaken Images.
Import Images – Allows the user to import images.
Modify Doctors list – Allows the user to modify the listed doctor – only applicable in certain applications. (This will more than likely not be relevant to your configuration.)
Print Images – Allows the user to print images.
Re-allocate Licenses – Allows the user to re-allocate where the licenses for the software are being used.
Report Generator – Allows the user to generate reports based upon the software.
Saving modified images – Allows the user to overwrite original images after making modifications.
Start Application – Allows the user to start the XVCapture application.
View/Query Images – Allows the user to query and view images.
Understanding AD and LDAP
Taken from https://www.informit.com/articles/article.aspx?p=101405&seqNum=7
LDAP (Lightweight Directory Access Protocol) Namespace Structure
A directory service has two major features. First, it distributes its information base among many different servers. Second, users can access directory information by querying any of those servers. Making this work requires defining a namespace in which each object's location can be quickly determined.
Common Names
information in an LDAP database comes in the form of objects. Objects have attributes that describe them. For example, the User object for Tom Jones would have attributes such as Tom's logon name, his password, his phone number, his email address, his department, and so forth.
When an LDAP client needs to locate information about an object, it submits a query that contains the object's distinguished name (DN) and the attributes the client wants to see. A search for information about Tom Jones could be phrased in a couple of ways:
You could search for attributes in Tom's User object. “Give me the Department attribute for cn=Tom Jones,cn=Users,dc=Company,dc=com.”
You could search for attributes that end up including Tom's object. “Give me all User objects with a Department attribute equal to Finance.”