Domain admins not able to add LDAP users

[borisstoyanov]

ISSUE TYPE

• Improvement Request

COMPONENT NAME

UI, API

CLOUDSTACK VERSION

4.14 

SUMMARY

Domain admins are not able to see the ‘Add LDAP Account' button at both “Account” tab and Domain - > Accounts tab.
It would be really good if they can manage that as well, since they manage native users within the domain

[rohityadavcloud]

cc @DaanHoogland @davidjumani any remarks?

[davidjumani]

@borisstoyanov This would require a backend change as right now only admins can create ldap accounts

[DaanHoogland]

I have my doubts. domain level ldap binding would only work for autosync'd ldap accounts/users. I am not sure it is usefull to manually add users to those. on root level giving domain admins access would also not be right. Not saying that there is no usecase, just that I don't see it yet.