Ithicos Directory Manager vs One Identity Active Roles

Ithicos Directory Manager is a web-based delegated administration tool for authorized staff managing Active Directory accounts. Delegates can edit contact fields, titles, departments, and custom properties, then reset passwords, unlock accounts, enable or disable accounts, and set expiration dates. The Advanced edition adds template-based user creation, delegated group management, and soft or hard deletion workflows that disable accounts and remove group access. Administrators can enforce required inputs, regular-expression rules, dropdowns, address sets, and cascading subsets. Searches and filtered user lists export to CSV or Excel. User photos can be uploaded to local Active Directory and Microsoft 365 profile pictures. Custom PowerShell scripts can run after profile or account changes, while timestamps and CSV audit records support auditing. Version 3.5 adds Secure LDAP for encrypted connections. It runs on premises on 64-bit Windows Server with IIS and .NET Framework 4.8. Evaluation builds are fully functional for 30 days.

One Identity Active Roles is a paid administration and governance product for Microsoft Active Directory, Entra ID, and Microsoft 365. A unified console brings those environments into one interface, while workflow automation helps implement and enforce consistent policies. Lifecycle management uses automation and scripting to support least-privilege accounts. Role-based access control enables fine-grained delegation across Active Directory domains and Entra ID and Microsoft 365 tenants. Change history and activity tracking support audits and remediation. Listed integrations include One Identity Manager, Safeguard Authentication Services, Defender, Change Auditor, GPO Admin, Password Manager, and Starling Connect. Supported platforms are web, iOS, Android, and self-hosted virtual or physical appliances; the installation guide describes on-premises requirements. A license must be purchased for legal use, and the fee depends on the number of managed users. Pricing is on request. There is no free plan, but the product page offers a free trial and a virtual trial. Listed capabilities include delegated administration, AD auditing, lifecycle automation, and reporting; password self-service is not included.