No more typing reviews! Try our Samantha, our new voice AI agent.
Manik Singh - PeerSpot reviewer
Penetration Tester at Essen Vision Software
Real User
Top 5Leaderboard
May 7, 2026
Delegated workflows have automated account management and improve secure access control
Pros and Cons
  • "Clear ROI has been seen with One Identity Active Roles, mainly through the time savings and reduced manual administration."
  • "The UI of One Identity Active Roles could be more modern and responsive, and some advanced workflow configurations can feel complex during setup."

What is our primary use case?

One Identity Active Roles is primarily used for Active Directory administration, delegation, delegated access control, user provisioning, and automating routine account management tasks.

One Identity Active Roles automatically creates user accounts with correct group memberships and permissions based on the department and role, which saves a lot of manual AD work during onboarding.

One Identity Active Roles is also used for auditing and approval workflows, especially for sensitive AD changes where better control and tracking are needed.

What is most valuable?

The best features One Identity Active Roles offers are delegated administration, automation workflows, centralized AD management, and the detailed auditing capabilities that make tracking changes much easier.

Delegated administration has made the biggest impact because it allows the different teams to manage specific AD tasks securely without giving full domain-level access.

The automation and approval workflows stand out significantly in larger environments, especially when consistency and better control over AD changes are needed.

One Identity Active Roles has positively impacted the organization by reducing a lot of manual AD administration work, improving access control, and helping standardize user management processes across the organization.

What needs improvement?

The UI of One Identity Active Roles could be more modern and responsive, and some advanced workflow configurations can feel complex during setup.

Better cloud integration and simpler reporting customizations would definitely improve the overall experience, especially in hybrid environments.

For how long have I used the solution?

One Identity Active Roles has been in use for two years.
Buyer's Guide
One Identity Active Roles
June 2026
Learn what your peers think about One Identity Active Roles. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.
904,748 professionals have used our research since 2012.

What do I think about the stability of the solution?

One Identity Active Roles is very stable.

What do I think about the scalability of the solution?

One Identity Active Roles scales very well in large enterprise environments, especially for organizations managing multiple domains, hybrid AD setups, and high volumes of user provisioning tasks.

How are customer service and support?

Customer support for One Identity Active Roles is great.

Which solution did I use previously and why did I switch?

Before One Identity Active Roles, the organization mostly relied on native administrative Active Directory tools and manual processes. The switch was made for better automation, delegation, and centralized control over AD management.

A few other IAM and AD management solutions were evaluated before choosing One Identity Active Roles, including SalePoint, Microsoft Entra ID, and ManageEngine.

How was the initial setup?

The integration of One Identity Active Roles with the existing IT infrastructure and directory services was fairly smooth overall since it works well with existing Active Directory environments, though some advanced integrations and workflow customization required extra planning and testing.

What was our ROI?

Clear ROI has been seen with One Identity Active Roles, mainly through the time savings and reduced manual administration. Onboarding, permission updates, and account management tasks that used to take a lot of manual effort are now largely automated and completed much faster.

What's my experience with pricing, setup cost, and licensing?

The pricing, setup cost, and licensing of One Identity Active Roles are definitely enterprise-focused, but the value from the automation, delegation, administration, and the reduced manual AD effort makes the investment worthwhile in large environments.

What other advice do I have?

My advice to others looking into using One Identity Active Roles is to plan your delegation model and automation workflows carefully before deployment because the platform delivers the most value when roles, approvals, and AD processes are well-structured from the beginning.

One Identity Active Roles has been a reliable solution for improving AD governance, reducing manual administration, and enforcing better access control across the environment. The overall review rating for One Identity Active Roles is 8 out of 10.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 7, 2026
Flag as inappropriate
PeerSpot user
Business Development Intern
Real User
Top 5
May 4, 2026
Approval workflow has simplified secure access requests but still needs faster urgent handling
Pros and Cons
  • "One Identity Active Roles has made things more organized and secure across the company, and it has also reduced the need to contact IT administrators directly, saving time for both me and the IT staff."
  • "One Identity Active Roles could be improved by speeding up the approval process, especially for urgent access requests."

What is our primary use case?

I am an end user of One Identity Active Roles for internal access and system purposes. When I need access to an internal dashboard to analyze business data for a project, I raise a request through One Identity Active Roles. The request goes through the approval process, and once approved, I am granted access without needing to contact the IT team directly. This helps me complete my tasks on time, and the status can be easily tracked so I do not have to manually follow up. The approval workflow makes the process secure and smooth, and even though I am not from a technical background, it helps me significantly.

I use One Identity Active Roles to gain access to some particular tools that are shared among multiple interns in my company.

What is most valuable?

The best feature that One Identity Active Roles offers is the approval flow, which gives access only to authorized persons, making the process secure. The user-friendly interface allows someone without a technical background to apply for the tools needed and be given access.

The approval process makes things more secure and efficient. This process prevents unauthorized and accidental access to sensitive tools and data, which are major concerns for my company. I have been told to access some particular tools and data through that portal only.

One Identity Active Roles has made things more organized and secure across the company. It has also reduced the need to contact IT administrators directly, saving time for both me and the IT staff. During the orientation program, I was informed that the use of this tool has reduced the IT team's workload. Previously, the IT team needed to provide the tool and monitor who was using it, but now with this tool, they do not have to specifically check on who is accessing the tools and data.

The IT team has reduced their workload by around four hours, although I do not know the specific hours saved. Access to the tools has become much faster; as soon as I apply, it goes through the approval process, and if the tool is required, then access is provided to me or any other IT intern.

What needs improvement?

One Identity Active Roles could be improved by speeding up the approval process, especially for urgent access requests. Sometimes I need urgent approval, and then I have to call the IT team to manually pass my approval. An option to flag that I need the tool urgently would help the IT team know to expedite that approval in the future. I have seen times when I need a tool urgently, but the process takes time.

The dependency on approval sometimes causes delays, which can slow down urgent work that I am doing, particularly as my position as an intern has been growing.

For how long have I used the solution?

By the first of May, it has been approximately two months since I have been working in my current field.

What do I think about the stability of the solution?

One Identity Active Roles is quite stable, and I have not seen any downtime or crashes in my use case.

What do I think about the scalability of the solution?

One Identity Active Roles is a great tool, pretty scalable, and stable for the daily purposes we are using it for. It can be easily deployed in the company, and it is a stable solution for non-technical users like myself.

What other advice do I have?

I received one or two days of training to use all One Identity tools utilized in my company, such as One Identity Active Roles, One Identity OneLogin, and Safeguard Manager, which are all great tools. I would rate this review a 7.5 out of 10.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 4, 2026
Flag as inappropriate
PeerSpot user
Buyer's Guide
One Identity Active Roles
June 2026
Learn what your peers think about One Identity Active Roles. Get advice and tips from experienced pros sharing their opinions. Updated: June 2026.
904,748 professionals have used our research since 2012.
Bhavesh Jha - PeerSpot reviewer
Technical Support Executive at Digitaltrack
Real User
Top 5
Apr 16, 2026
Automated role-based access has transformed daily directory tasks and reduces human errors
Pros and Cons
  • "The auto-provisioning or role-based permission handling makes my daily work easier and more efficient because it automates our environment since we don't have to manually onboard or deboard employees."
  • "The initial setup of One Identity Active Roles can be more simplified."

What is our primary use case?

My primary use case for One Identity Active Roles is to handle day-to-day Active Directory operations that allow different teams to perform tasks without giving them full administrative password or access. This enables management in a safer mode and in the most organized way.

In daily operation, the help desk handles password resetting or account unlocking without admin rights. This is our real-time example. When new users are created in Active Directory, the configurations are automatically applied. This really helps in automating the workload and reducing human errors.

What is most valuable?

The best features of One Identity Active Roles are its automated features, provisioning or deprovisioning users, and its role-based permission handling where access is assigned through roles instead of giving full permission individually. This simplifies management in a large environment.

The auto-provisioning or role-based permission handling makes my daily work easier and more efficient because it automates our environment since we don't have to manually onboard or deboard employees. It is totally automated which helps in reducing the workload of the IT team by about 50 to 60 percent. This makes our job easier and efficient without having human errors.

One Identity Active Roles has had a great positive impact on our organization. It has really made administrator directory management easy in a controlled way and has improved security due to reduced direct access to applications or systems, thus saving time.

I can say we have a positive impact in terms of metrics. It has really reduced administrative efforts, with a 40 to 60 percent decrease in time spent on routine Active Directory tasks such as user creation, password resetting, or any group changing for employees. This really helped the team to handle requests without any escalations and also allowed for faster user provisioning.

What needs improvement?

Any improvement needed as of now is non-existent; it is perfectly working in my environment. One Identity Active Roles provides great features with a smooth process.

The initial setup of One Identity Active Roles can be more simplified. Apart from this, everything is perfect.

For how long have I used the solution?

I have been using One Identity Active Roles for more than four years.

What do I think about the stability of the solution?

One Identity Active Roles is stable.

What do I think about the scalability of the solution?

The scalability of One Identity Active Roles is excellent and matches our organization's growth.

How are customer service and support?

The customer support for One Identity Active Roles is excellent in their technical part and provides resolution for any technical issues.

Which solution did I use previously and why did I switch?

Since I started, we have been using One Identity Active Roles only as our solution.

How was the initial setup?

The initial setup of One Identity Active Roles can be more simplified.

What about the implementation team?

My experience with pricing, setup cost, and licensing was straightforward. We have great teaming with the vendor sales team, so there is no issue with the pricing or setup cost or licensing. They really helped in the procurement of the solution.

What was our ROI?

We have seen a great return on investment in using One Identity Active Roles after deployment, both in terms of cost savings and operational efficiency.

What's my experience with pricing, setup cost, and licensing?

My experience with pricing, setup cost, and licensing was straightforward.

Which other solutions did I evaluate?

We have not evaluated other options before choosing One Identity Active Roles.

What other advice do I have?

I don't have any additional thoughts about my main use case. I don't want to add anything else about the features. I would really recommend One Identity Active Roles to others looking into using it. I have given this review a rating of 8.

Which deployment model are you using for this solution?

On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Apr 16, 2026
Flag as inappropriate
PeerSpot user
reviewer2845803 - PeerSpot reviewer
Tranedd Engineer at a financial services firm with 51-200 employees
Real User
Top 20
May 24, 2026
Automation has transformed user onboarding and reduces manual directory administration
Pros and Cons
  • "We achieve a strong ROI with One Identity Active Roles through approximately a forty to fifty percent reduction in service desk workload, faster user provisioning from hours to minutes, fewer manual administration errors, and improved compliance and audit efficiency."
  • "One Identity Active Roles can be improved with a more modern and intuitive user interface, better reporting and analytics, simplified workflow customization, enhanced troubleshooting tools, and stronger cloud and hybrid identity integration capabilities for large enterprise environments."

What is our primary use case?

My main use case for One Identity Active Roles is automation.

One specific example of how I use automation with One Identity Active Roles is through automated employee onboarding, where when HR shares new employee details, the system automatically creates an Active Directory account, assigning it to the correct OU, group membership, email attributes, and permission based on the employee's department or role. This significantly reduces manual efforts, provisioning time, and configuration errors.

Using One Identity Active Roles, we consolidate multiple manual Active Directory administration processes and native management tools into a single, centralized platform for user provisioning, delegation, RBAC, automation, and auditing.

What is most valuable?

The best features of One Identity Active Roles are automation, delegated administration, role-based access control, approval workflows, policy enforcement, and auditing, as these features simplify Active Directory management, improve security, reduce manual efforts, and enhance compliance.

The feature that has made the biggest difference for me in One Identity Active Roles is automation, especially automated user provisioning and de-provisioning, because it significantly reduces manual Active Directory tasks, minimizes errors, improves consistency, and accelerates onboarding and off-boarding processes.

Additionally, the delegated administration and auditing features in One Identity Active Roles are very valuable as they improve security by limiting excessive privilege and provide centralized tracking of Active Directory changes for compliance and governance.

One Identity Active Roles positively impacts our organization by reducing manual Active Directory administration, improving security through delegated access and RBAC, speeding up onboarding and off-boarding processes, reducing service desk workload, and enhancing compliance.

What needs improvement?

One Identity Active Roles can be improved with a more modern and intuitive user interface, better reporting and analytics, simplified workflow customization, enhanced troubleshooting tools, and stronger cloud and hybrid identity integration capabilities for large enterprise environments.

For how long have I used the solution?

I have been working in my current field for the last two years.

What do I think about the stability of the solution?

One Identity Active Roles is generally very stable and reliable in enterprise environments with consistent performance for Active Directory automation, delegated administration, and identity management tasks when properly configured and maintained.

What do I think about the scalability of the solution?

One Identity Active Roles scales very well for enterprise environments and can efficiently manage thousands of users, groups, and Active Directory objects through centralized automation, delegated administration, and policy management without significant performance issues.

How are customer service and support?

Customer support for One Identity Active Roles has been generally good with knowledgeable technical teams and effective assistance for deployment, troubleshooting, and Active Directory integration issues, although response time for complex escalations can sometimes be slower.

Which solution did I use previously and why did I switch?

Before implementing One Identity Active Roles, we mainly used native Active Directory tools and a manual administration process along with basic PowerShell scripting. We switched because One Identity Active Roles provides centralized management, automation, delegation, RBAC, and better compliance and auditing capabilities.

How was the initial setup?

I assess the integration of One Identity Active Roles as moderately easy, around a four out of ten in difficulty, because the core integration with Active Directory and existing Microsoft infrastructure is straightforward.

What about the implementation team?

Before selecting One Identity Active Roles, we evaluated options such as Microsoft Identity Management and SailPoint IdentityIQ, but we chose One Identity Active Roles because of its strong Active Directory integration, automation, and delegated administration.

What was our ROI?

We achieve a strong ROI with One Identity Active Roles through approximately a forty to fifty percent reduction in service desk workload, faster user provisioning from hours to minutes, fewer manual administration errors, and improved compliance and audit efficiency.

What's my experience with pricing, setup cost, and licensing?

My experience with pricing, setup cost, and licensing with One Identity Active Roles has been generally positive, as the license is enterprise-based and setup requires moderate effort for Active Directory integration and workflow configuration, but the solution provides strong value through automation and delegation.

Which other solutions did I evaluate?

Before selecting One Identity Active Roles, we evaluated options such as Microsoft Identity Management and SailPoint IdentityIQ, but we chose One Identity Active Roles because of its strong Active Directory integration, automation, and delegated administration.

What other advice do I have?

My advice to others considering One Identity Active Roles is to carefully plan the RBAC model, workflow, and delegation structure before deployment, start with a pilot implementation, and fully utilize its automation and auditing features to improve Active Directory, security, compliance, and operational efficiency. I would rate this solution an eight out of ten.

Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Last updated: May 24, 2026
Flag as inappropriate
PeerSpot user
Ankush Kondewar - PeerSpot reviewer
Senior Technical Support Executive at DigitalTrack Solutions Pvt Ltd
Real User
Top 5Leaderboard
Apr 2, 2026
Automation has improved secure role-based access and reduces errors in user account management
Pros and Cons
  • "One Identity Active Roles has helped us improve security with smooth processes."
  • "The initial setup could be simpler because sometimes it feels like it should be more straightforward."

What is our primary use case?

When a new user is created, predefined rules automatically apply naming standards and assigned groups. This reduces manual tasks while ensuring consistency across all operations. It prevents and avoids mistakes during the account setup.

How has it helped my organization?

One Identity Active Roles has helped us improve security with smooth processes. It provides role-based control that ensures every action in the AD follows the rules. This provides great outcomes and improvements in our organization's process.

We have seen fewer mistakes and it is saving our time. It provides great centralized control and security by limiting access rights. These are the positive outcomes we are experiencing.

What is most valuable?

The best feature of One Identity Active Roles is its ability to control delegations. It allows us to assign limited access to team members based on their roles and responsibilities. This helps us reduce risk while keeping operations smooth and provides more secure AD management.

Delegating tasks like password resets has impacted positively in our organization and has helped us to smoothen and speed up our work. It allows organizations to control user accounts, their permissions and changes in a more structured and simpler way. This helps improve both security and the application process.

What needs improvement?

I do not see anything that needs to be changed as of now concerning the organization's needs because it is working very well and it is providing great features with great processes. The initial setup could be simpler because sometimes it feels like it should be more straightforward.

For how long have I used the solution?

I have been working in my current field for more than eight years. I have been using One Identity Active Roles for more than three years.

How are customer service and support?

The vendor is ready to provide technical support 24/7 and able to resolve issues in a given timeline with proper root cause analysis of the issue.

Which solution did I use previously and why did I switch?

We have not evaluated other options.

How was the initial setup?

I had a great experience with the pricing, setup cost, and licensing because the sales team of the vendor was very helpful during all of this procedure and process.

What was our ROI?

I have seen a good return on investment with One Identity Active Roles. It is helping us to save our efforts and time to manage all these processes and tasks within the time limit. It is saving our team time as well as the money of the organization.

What other advice do I have?

I highly recommend One Identity Active Roles for any organization looking for strong management of their Active Directory in their environment with strong control, automation, and security features. Organizations can consider this solution the best fit. I also advise starting with the basic configuration and expanding gradually while providing proper training to the IT team. This will be helpful and beneficial over time. I give this product a rating of 9 out of 10.

Which deployment model are you using for this solution?

On-premises

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other
Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
Last updated: Apr 2, 2026
Flag as inappropriate
PeerSpot user
Bijja Maheshwar - PeerSpot reviewer
Assistant Manager at DigitalTrack Solutions Pvt Ltd
Real User
Top 5
Apr 9, 2026
Policy automation has reduced manual errors and now streamlines compliant directory operations
Pros and Cons
  • "We have seen a good return on investment because the automation feature has reduced manual efforts by around thirty to fifty percent and improved efficiency with reduced workload, saving our engineers time."

    What is our primary use case?

    One Identity Active Roles is used primarily to enforce policy-based control on Active Directory objects, which ensures all changes follow defined rules and workflows, helping us maintain data integrity and governance across our entire architecture.

    Policy-based management enforces rules on Active Directory operations such as user creation, modification, and deletion, ensuring that naming conventions and mandatory attributes are applied, which helps us prevent misconfiguration.

    What is most valuable?

    One Identity Active Roles offers strong role-based access control and delegation capabilities that improve security by limiting admin privilege, supports automation, and has a powerful policy engine for enforcing standard policies, ensuring consistency across Active Directory operations, which reduces misconfiguration. It also provides comprehensive audit and reporting features that improve visibility into changes.

    Compliance with the Active Directory environment has really helped us with audit and reporting capabilities.

    One Identity Active Roles has positively impacted our organization by increasing efficiency through automating routine tasks and improving governance through approval workflows, making our Active Directory management workload more structured.

    We have seen that it has reduced manual work and we have noticed a reduction in human errors along with a decrease in time efforts, so our team is now able to handle more workload than before.

    What needs improvement?

    One Identity Active Roles is working well for our environment and we have not seen anything that needs to be improved as of now. However, the initial setup and configuration can be complex for a new engineer or new organization, requiring Active Directory expertise, which increases deployment effort. The initial setup could be simplified.

    For how long have I used the solution?

    I have been using One Identity Active Roles for more than four years.

    What do I think about the stability of the solution?

    One Identity Active Roles is stable.

    What do I think about the scalability of the solution?

    Scalability-wise, there is no issue, and it matches our organization's growth.

    How are customer service and support?

    I have interacted with the customer support team multiple times, and they are ready to support at any time whenever we raise a ticket, providing concrete solutions for any kind of challenge.

    Which solution did I use previously and why did I switch?

    From day one, we have been using One Identity Active Roles and have not used any different solution.

    How was the initial setup?

    I had a great experience with the setup cost, pricing, and licensing costs because the sales team of the vendor is really helpful during the entire procurement of the solution, and we are grateful and happy with the support provided by the vendor sales team.

    What was our ROI?

    We have seen a good return on investment because the automation feature has reduced manual efforts by around thirty to fifty percent and improved efficiency with reduced workload, saving our engineers time.

    What's my experience with pricing, setup cost, and licensing?

    I had a great experience with the setup cost, pricing, and licensing costs because the sales team of the vendor is really helpful during the entire procurement of the solution, and we are grateful and happy with the support provided by the vendor sales team.

    Which other solutions did I evaluate?

    We have not gone for the evaluation of other options.

    What other advice do I have?

    One Identity Active Roles is a great solution to consider for Active Directory management and for enforcing policies, central management, and great visibility, which will be helpful for any organization. I would also advise starting with defining the roles and whatever policies need to be implemented to ensure smooth deployment. I rate this product a ten out of ten.

    Which deployment model are you using for this solution?

    On-premises

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Last updated: Apr 9, 2026
    Flag as inappropriate
    PeerSpot user
    Niyajuddin Tiwale - PeerSpot reviewer
    Technique at Digitaltrack
    Real User
    Top 5Leaderboard
    Apr 2, 2026
    Automated onboarding has transformed user lifecycle management and reduces manual access errors
    Pros and Cons
    • "One Identity Active Roles is recommended as one of the best solutions currently in the market since it addresses many issues such as risks faced, inconsistent account setup, excessive admin privileges, lack of audit trails, and manual provisioning errors, all of which can be resolved with this solution."

      What is our primary use case?

      One Identity Active Roles is used for automated user lifecycle management and delegated administration across AD environments and infrastructure. When a new employee joins the organization, their account is created automatically based on their department, post, and location, eliminating manual work.

      When an employee moves to a different department, their access is automatically updated to reflect their roles. During the onboarding process, data is fetched from HR tools, and based on this fetched data, the access needed for employees is automatically assigned and sent. Whenever a user moves to a different department, their posts are automatically updated and reflected in their roles.

      What is most valuable?

      One Identity Active Roles offers exceptional features, including a delegation model that combines policy enforcement. The solution allows the help desk team to be given the exact permissions they need, enabling them to reset passwords, unlock accounts, and update phone numbers without granting them access to areas they should not touch, such as group membership or admin accounts. Every action taken follows the defined policy automatically, making this the favorite feature of the solution.

      This automated delegation saves significant time for the team, as it has changed how IT operations work. Previously, a constant flood of routine requests landed on the admin team, who were already busy with substantial work. Now, such tasks are automated rather than performed manually.

      One Identity Active Roles enables time savings with password resetting and account unlocking, which used to consume significant management time but are now automated. The solution also provides improved flexibility, policy enforcement that eliminates human errors, and seamless Active Directory integrations. A substantial amount of time has been reduced, and human errors have decreased.

      What needs improvement?

      There are no features missing; however, the initial setup could be simpler. Apart from this, everything is smooth.

      For how long have I used the solution?

      One Identity Active Roles has been in use for more than three years.

      What other advice do I have?

      There are no additional thoughts to comment on regarding the main use case. One Identity Active Roles is perfectly adequate as of now. One Identity Active Roles is recommended as one of the best solutions currently in the market since it addresses many issues such as risks faced, inconsistent account setup, excessive admin privileges, lack of audit trails, and manual provisioning errors, all of which can be resolved with this solution. This review has been given a rating of eight.

      Which deployment model are you using for this solution?

      On-premises
      Disclosure: My company has a business relationship with this vendor other than being a customer. Partner
      Last updated: Apr 2, 2026
      Flag as inappropriate
      PeerSpot user
      reviewer2789013 - PeerSpot reviewer
      Assistant Manager- Pre-sales ( IT-Enterprise Vertical ) at a tech vendor with 201-500 employees
      Reseller
      Top 20
      Dec 25, 2025
      Identity governance has improved access control and delivers faster compliance for regulated clients
      Pros and Cons
      • "One Identity Active Roles brings a positive impact to organizations in that they will start realizing the ROI in a much faster manner because the implementation time is very short and it is easy to use."
      • "If One Identity Active Roles has to be positioned for all customers, not just the entities which are being regulated, then the pricing has to be normalized."

      What is our primary use case?

      I am one of the resellers for One Identity Active Roles, so that is the reason I downloaded it.

      One Identity Active Roles is generally used in complex IT setups where Active Directory plays a critical role and organizations have many compliances and mandates to be followed. For example, in India, we have many banking customers who are governed by the Reserve Bank. In the US, you have the Central Bank or Federal Bank; in India, we have something called a Reserve Bank. All the big financial sectors have to follow the mandates and compliance provided by them. Identity solutions come into that part as well. So to make sure that everybody has the right amount of access and nobody has all access, One Identity Active Roles plays a critical role over there.

      In India, this kind of requirement mainly comes from regulated entities or regulated enterprises. So they prefer the on-premises solution for One Identity Active Roles. We have not had a customer in the past who has gone through the cloud solution. They want everything to be hosted on their premises. Since I have not come across the cloud-based installation yet, I cannot comment on that piece, but on-premises is what they look for in the current setup which we provide.

      What is most valuable?

      One Identity Active Roles brings significant value through its lifecycle management capabilities, which are very good with no complaints or problems at all.

      With the inclusion of One Login, which One Identity acquired three or four years back, One Identity Active Roles has gained complete coverage. Earlier, One Identity lacked an IAM solution. They always have had the Active Directory management solution in the form of One Identity Active Roles or through the IGA solution. But with the inclusion of One Login, that has really fulfilled the requirement which customers need from a single vendor. The competition includes SalePoint, Saviynt, and others, including Ping Identity, who is also coming up with an IGA kind of solution. One Identity has been providing it for a very long time, longer than these competitors who have just started realizing all those things and providing a similar kind of solution to the customer. One Login and One Identity provide complete coverage to the customer, which is really helpful.

      One Identity Active Roles brings a positive impact to organizations in that they will start realizing the ROI in a much faster manner because the implementation time is very short and it is easy to use. Additionally, since there are many regulated entities which need this kind of solution and in the market there are very few solution providers who can provide this kind of coverage, that is the advantage which One Identity Active Roles has.

      What needs improvement?

      If One Identity Active Roles has to be positioned for all customers, not just the entities which are being regulated, then the pricing has to be normalized. There are many solution providers in the market who can do it at a much lesser price. India is a price-sensitive market, and I can speak only for India; I cannot speak for the other part of the world. We have many local vendors who can provide these kinds of solutions. But since One Identity Active Roles is a much more mature product and has been in the market for a very long time, customers have some respect for that and they can pay the premium. But that premium cannot be three times, two times, or beyond three times. So the pricing has to be normalized based on the market. Every market has its own constraints, so the One Identity team should work on that aspect.

      For how long have I used the solution?

      I have been reselling One Identity Active Roles for almost seven to eight years.

      How are customer service and support?

      I have not had a challenge working with One Identity technical support so far. Everything is good, and I can give One Identity technical support a rating of ten.

      How would you rate customer service and support?

      Positive

      Which solution did I use previously and why did I switch?

      I have worked with Microsoft earlier. I started my career with Active Directory, which is the base of providing identity in the older days. Twenty years back, when we talk about identity, it was always Active Directory from Microsoft. So I have worked with them. Now even Microsoft has come up with their own offering called Entra ID, and they are also competing with One Identity or SalePoint in a similar segment.

      How was the initial setup?

      From the product perspective, deploying One Identity Active Roles is not that much cumbersome or troublesome. It is a very easy deployment. The only thing which we have to generally figure out is the kind of Active Directory infrastructure the customer has, and based on that, we will have to configure the rules or the policies in the tool.

      From the product perspective, the installation of One Identity Active Roles will not take much time and the integration with Active Directory itself will not take much time. Installation is hassle-free and not complex at all. The only thing which takes time is the configuration part. When I say configuration, it is mainly from the policies perspective because we have to understand the customer requirement and based on that we have to create all the rules and policies so that we can fulfill all the use cases.

      When I say the configuration of One Identity Active Roles, it is basically because of the customer setup and not because of the tool itself. Because you have to create a lot of policies, and those policies need to be created because the customer has that kind of complexity in their setup. Otherwise, this is an easy tool to manage. If the environment is well-configured or well-managed by the customer, then One Identity Active Roles will not take much time.

      What about the implementation team?

      I do provide deployment for my customers. For deploying One Identity Active Roles, you need one person, and that is more than enough to manage the solution. We have a different team who does the installation of One Identity Active Roles.

      What was our ROI?

      One Identity Active Roles has helped my organization increase operational efficiency. Now only the right person has the right access. Not everybody can go and log into Active Directory or the identity management solution which they have directly. One Identity has a theme that they want the right people to have the right set of access, and this is what they are able to provide with their tool.

      One Identity Active Roles has helped to reduce the number of erroneous privileged accounts. That is what they want to achieve. When I talk about customers, they do not want any intruders or hackers to get access to their data. This can happen even from a legitimate user if their credentials are compromised. These kinds of solutions always prohibit those kinds of activities by a hacker or a mischievous character in the organization to take advantage of the system.

      One Identity Active Roles helps to reduce identity-based breaches.

      What other advice do I have?

      Right now, a lot of the discussion is centered on agentic AI for One Identity Active Roles. An agentic AI who can do most common tasks on its own would really help.

      To be very honest, the ability to provision and de-provision resources in directories needs to be handled by my technical person, since I do not belong to that field.

      I feel with the kind of use cases which One Identity Active Roles addresses and the kind of market we play into, then I think nine is a good rating for them. There is always room for improvement, so hence I am not giving it a ten at this time.

      Which deployment model are you using for this solution?

      On-premises
      Disclosure: My company has a business relationship with this vendor other than being a customer. Reseller
      Last updated: Dec 25, 2025
      Flag as inappropriate
      PeerSpot user
      reviewer2800650 - PeerSpot reviewer
      Service Delivery Manager For Information Security at a financial services firm with 1-10 employees
      Real User
      Top 10
      Feb 8, 2026
      Automation has saved time in managing groups but the interface still needs modernization
      Pros and Cons
      • "One Identity Active Roles has positively impacted my organization by providing a consistent and easy to understand interface for Active Directory, whether you are reading it or whether you are actively managing Active Directory."
      • "I have not seen a return on investment or any relevant metrics and I cannot imagine we would have saved any employees or any full-time equivalents for One Identity Active Roles."

      What is our primary use case?

      My main use case for One Identity Active Roles is managing Active Directory.

      I use One Identity Active Roles to manage Active Directory by adding users to groups. When I'm adding users to groups with One Identity Active Roles, we sometimes do it manually, and sometimes we automate depending on the task. There are some automations in place for simple tasks such as adding people to distribution groups, but for more complex and sensitive tasks, they are done manually where a ticket comes in ServiceNow, and then we respond to that ticket manually by adding the people and then approving it.

      What is most valuable?

      I think the best feature One Identity Active Roles offers is probably the automation capability, although we do not utilize it to its fullest extent.

      Since automation is a highlight for me, what I like about the automation in One Identity Active Roles is the time savings.

      One Identity Active Roles has positively impacted my organization by providing a consistent and easy to understand interface for Active Directory, whether you are reading it or whether you are actively managing Active Directory.

      What needs improvement?

      One Identity Active Roles can be improved by updating the interface as it seems to have been static for quite some time, and I feel there could certainly be improvements made. Similarly, with the automation, I feel an updated user interface would make it slightly easier to use and understand for people who are not necessarily familiar with things such as the Active Directory Users and Computers interface.

      Modernization is needed for those improvements.

      For how long have I used the solution?

      I personally have been using One Identity Active Roles for four years, and my company has been using it for longer, probably six to eight years.

      What do I think about the stability of the solution?

      One Identity Active Roles is very stable and we never have any issues with it.

      What do I think about the scalability of the solution?

      One Identity Active Roles has scaled well with us and we are not the biggest organization, but we have never had issues with scaling it.

      How are customer service and support?

      Customer support for One Identity Active Roles is good and we have never had to raise an issue with customer support because it is a very stable product.

      How would you rate customer service and support?

      Positive

      Which solution did I use previously and why did I switch?

      I did not previously use a different solution as I was not here when we may have used a previous solution, but I think we have always had One Identity Active Roles, as it has been here for over eight years.

      What was our ROI?

      I have not seen a return on investment or any relevant metrics and I cannot imagine we would have saved any employees or any full-time equivalents for One Identity Active Roles.

      What's my experience with pricing, setup cost, and licensing?

      My experience with pricing, setup cost, and licensing for One Identity Active Roles is that they are all very reasonable.

      Which other solutions did I evaluate?

      Before choosing One Identity Active Roles, my team did not evaluate other options because I was not here when the team chose it as it was so long ago.

      What other advice do I have?

      The advice I would give to others looking into using One Identity Active Roles is to be already familiar with Active Directory Users and Computers if possible, and dive into the automation as much as possible when you first receive it without hesitation to test it.

      One Identity Active Roles is a very stable product and we would not consider getting rid of it, or at least a product of this sort, as there is definitely a need for it. I would say that as we migrate further into the cloud, there will probably be less of a need for it, but certainly for on-premises Active Directory, it is very important to us. I gave this review a rating of six.

      Disclosure: My company does not have a business relationship with this vendor other than being a customer.
      Last updated: Feb 8, 2026
      Flag as inappropriate
      PeerSpot user
      Adarsh-Singh - PeerSpot reviewer
      Developer at a educational organization with 1,001-5,000 employees
      Real User
      Top 5
      Jun 14, 2026
      Automated identity lifecycle has improved secure role-based administration and onboarding
      Pros and Cons
      • "The positive impact is that it saved time, improved security, and made things more efficient."
      • "One Identity Active Roles can be improved, as the user interface could be more modernized and the reporting and analytics feature could be enhanced."

      What is our primary use case?

      One Identity Active Roles serves as my centralized identity and access management solution, with the key feature being the automation of users' lifecycle management. Another use case is delegated administration through a role-based administration model, which allows us to securely assign administrative tasks to different teams or individuals while maintaining governance and compliance.

      A specific example of how I use One Identity Active Roles for these tasks is in one of our projects for automating the user onboarding process. When a new employee joins the company we were building, One Identity Active Roles automatically provisions the account for the directory, assigns them to the appropriate security group based on their role, and creates the necessary permissions without manual intervention. This speeds up the onboarding and ensures consistent access rights.

      Regarding my main use case for One Identity Active Roles, we have also used it to implement access requests and approval workflows for the software we were building, and we are also automating the user offboarding. The automation capabilities of One Identity Active Roles are exceptional.

      What is most valuable?

      The best features One Identity Active Roles offers is role-based administration, which provides secure delegation of administrative tasks to different teams or individuals while maintaining governance and compliance.

      Role-based administration has helped my team because we can securely delegate specific administrative responsibilities to different teams or individuals without giving full administrator rights.

      One Identity Active Roles has positively impacted my organization. My senior managers informed me that aside from using it for other companies' projects, we are using it in our company as well. The positive impact is that it saved time, improved security, and made things more efficient. However, I have only been here for four to five months, and we have been using it for one project only.

      Regarding One Identity Active Roles's governance and security capabilities, the role-based delegated administration, centralized policy enforcement, and audit compliance and reporting are exceptional features. One Identity Active Roles has had a positive effect on reducing the complexity and workload of the administrative tasks related to Active Directory.

      What needs improvement?

      One Identity Active Roles can be improved, as the user interface could be more modernized and the reporting and analytics feature could be enhanced.

      It would be beneficial if the documentation was clearer.

      For how long have I used the solution?

      I have been using One Identity Active Roles for four to five months.

      What do I think about the stability of the solution?

      One Identity Active Roles is stable, and I believe it is very reliable.

      What do I think about the scalability of the solution?

      One Identity Active Roles has a scalable architecture.

      How are customer service and support?

      I have not used customer support for One Identity Active Roles.

      Which solution did I use previously and why did I switch?

      We are using One Identity Active Roles as our solution, so I did not previously use a different solution.

      How was the initial setup?

      Before choosing One Identity Active Roles, we did not evaluate other options.

      What about the implementation team?

      I was not on the implementation team, so I do not have knowledge about the ease or difficulty of integrating One Identity Active Roles with our existing IT infrastructure and directory services.

      What was our ROI?

      I am only four to five months into my tenure at this company, so I cannot specify whether I have seen a return on investment or share relevant metrics.

      What's my experience with pricing, setup cost, and licensing?

      I was not on the setup team either, so I cannot explain my experience with pricing, setup cost, and licensing.

      Which other solutions did I evaluate?

      Before choosing One Identity Active Roles, we did not evaluate other options.

      Which deployment model are you using for this solution?

      On-premises
      Disclosure: My company does not have a business relationship with this vendor other than being a customer.
      Last updated: Jun 14, 2026
      Flag as inappropriate
      PeerSpot user
      Buyer's Guide
      Download our free One Identity Active Roles Report and get advice and tips from experienced pros sharing their opinions.
      Updated: June 2026
      Buyer's Guide
      Download our free One Identity Active Roles Report and get advice and tips from experienced pros sharing their opinions.