Skip to content
SPECIFICTION
Get listed

Blazam

blazam.org

Free plan WebWindowsLinuxAPISelf-hosted
Visit blazam.org
Spec score 8.1 #4 of 25 in Active Directory Management Software

What it is

Blazam is a free, open-source web interface for delegating Active Directory administration to non-IT staff. It manages users, groups, organizational units, computers, and printers, including account unlocks, password resets, group assignments, and attribute changes. Administrators can create reusable access levels for groups or individuals, with controls for individual attributes and actions. Rules can trigger Active Directory actions in response to events or on schedules, using filters, ordered processing, conditional stops, and expiration settings. Blazam also lists a REST API and webhook notifications, and offers MFA through Cisco DUO or Google Authenticator-compatible TOTP. Its documentation says passwords are encrypted at rest and in transit, connections support TLS/SSL, and the app is designed to run as an unprivileged account. Windows installation can use IIS or a standalone service; Linux installation supports Apache, nginx, or a standalone service. Blazam requires Active Directory and a domain-joined Windows host. A well-defined OU structure is needed for granular delegation, and the documentation advises against installing it on a Domain Controller. The free plan is free and is MIT licensed for personal and commercial use.

Spec sheet

Purpose
Blazam is a free, open-source web interface for delegating Active Directory management to non-IT staff.Read 30 Sep 2026 · blazam.org
Audience
The maker describes Blazam as designed for overworked system administrators and organizations with limited funding, and says it supports nontechnical users with tasks otherwise handled by technical staff.Read 30 Sep 2026 · blazam.org
Integrations
The site lists a REST API and webhook notification subscriptions; it also describes MFA through Cisco DUO or Google Authenticator-compatible TOTP.Read 30 Sep 2026 · blazam.org
Security
The documentation says passwords are encrypted at rest and in transit, connections support TLS/SSL, and the app is designed to run under an unprivileged account.Read 30 Sep 2026 · docs.blazam.org
Support
The maker lists [email protected] as its contact address.Read 30 Sep 2026 · blazam.org
API limit
API tokens inherit the permissions of the Blazam user and can currently only be created by admins for existing Blazam users.Read 30 Sep 2026 · docs.blazam.org
Automation
Rule-based Active Directory actions can run in response to events or on schedules, with filters, ordered processing, conditional stops, and expiration settings.Read 30 Sep 2026 · blazam.org
Database options
Documented database options include SQLite, MSSQL Express, MariaDB, MSSQL, and MySQL; the requirements page lists recommended concurrent-user ceilings for each.Read 30 Sep 2026 · docs.blazam.org
Deployment requirement
Blazam requires Active Directory and a domain-joined Windows host, and its documentation says a well-defined OU structure is imperative for granular delegation.Read 30 Sep 2026 · docs.blazam.org
Directory management
It manages users, groups, organizational units, computers, and printers, including account unlocks, password resets, group assignments, and attribute changes.Read 30 Sep 2026 · blazam.org
Install options
The Windows installer can install under IIS or as a standalone service, while the Linux installer supports Apache, nginx, or a standalone service.Read 30 Sep 2026 · docs.blazam.org
Notable deployment limit
The documentation says installing Blazam on a Domain Controller is not recommended.Read 30 Sep 2026 · docs.blazam.org
Permissions
Reusable access levels can be applied to groups or individual users, with per-attribute and per-action permission controls.Read 30 Sep 2026 · blazam.org

Plans and prices

Free and Open Source Free Completely free of charge · MIT licensed for personal and commercial use Read 30 Sep 2026 · blazam.org

Every Blazam plan and price →

Strong points and limits

Strong points

  • Free and MIT licensed for commercial use.
  • Delegates permissions by attribute and action.
  • Automates actions on events or schedules.
  • Supports Windows and Linux installation options.
  • Includes REST API and webhook notifications.

Limits

  • Requires Active Directory and a domain-joined Windows host.
  • A well-defined OU structure is needed for granular delegation.
  • Installing on a Domain Controller is not recommended.
  • API tokens can only be created by admins for existing users.

Who it suits

Blazam suits system administrators who want nontechnical staff to handle delegated Active Directory tasks. It is aimed at organizations with limited funding and requires an existing Active Directory environment and domain-joined Windows host.

Verdict

Blazam offers granular delegation and rule-based automation for common directory tasks, with Windows and Linux installation paths. The Active Directory, host, and OU requirements should be checked before planning deployment.

Where Specifiction places it

Alternatives to BlazamAll alternatives →