What is a one sentence summary of your feature request?
Netwrix Password Secure should automatically create and assign a user-specific permission template to every user’s personal OU — both at the time of user creation and retroactively for all existing users via a batch operation.
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
At the moment, permission templates for personal OUs must be created and assigned manually by an administrator for each individual user. In environments with many users, this is impractical and leads to an inconsistent security posture where some personal OUs have a template and others do not — which is exactly the condition that makes my other Feature Request (Security Warning in the "Move Entry" Dialog When No Permission Template Is Available) a problem in the first place. The ideal solution is a dynamic placeholder variable (e.g. {current_user} along with other standard users/groups like admins) within a permission template that resolves to the respective OU owner at user creation time. Alternatively, the SDK/API could be extended to trigger automatic template creation and assignment as part of the user provisioning process. A one-time batch tool for existing users would complete the rollout. This approach eliminates the manual gap entirely and ensures every personal OU is protected by default from the moment a user account exists.
How do you currently solve the challenges you have by not having this feature?
Administrators manually create individual permission templates for each user’s personal OU and assign them one by one. For existing users without a template, bulk permission editing in the admin client can be used as a limited stopgap, but this does not scale, requires recurring manual effort, and offers no guarantee of completeness — new users added without a corresponding template will silently fall through the gap each time.