One Identity Active Roles
One Identity Active Roles manages administration and governance across Microsoft Active Directory, Entra ID, and Microsoft 365.
What One Identity Active Roles is
One Identity Active Roles manages administration and governance across Microsoft Active Directory, Entra ID, and Microsoft 365. Its unified console brings those environments together, while workflow automation helps apply consistent policies. Lifecycle management uses automation and scripting to support least-privilege accounts. Role-based access control lets administrators delegate fine-grained access across Active Directory domains and Entra ID and Microsoft 365 tenants. Change history and activity tracking support audits and remediation. Listed integrations include One Identity Manager, Safeguard Authentication Services, Defender, Change Auditor, GPO Admin, Password Manager, and Starling Connect. Active Roles supports web, iOS, Android, and self-hosted virtual or physical appliances; its installation guide covers on-premises requirements. The paid product has no free plan, though a free trial and virtual trial are offered. A license is required for legal use, and pricing is available on request. Listed features include delegated administration, AD auditing, lifecycle automation, and reporting; password self-service is not included.
Good
- One console for AD, Entra ID, and Microsoft 365
- Automates workflows and lifecycle management
- Supports fine-grained role-based delegation
- Change history supports audits and remediation
- Free trial and virtual trial are offered
Watch out
- No free plan
- License required for legal use
- Pricing is available on request
- Password self-service is not included
Who it suits
It suits organizations managing Active Directory, Entra ID, and Microsoft 365 that need delegated access, lifecycle automation, and audit support. It is available for web, mobile, and self-hosted environments.
Verdict
Active Roles combines administration, delegation, lifecycle automation, and auditing for Microsoft identity environments. Consider the paid licensing model and the absence of password self-service when weighing its fit.
Plans and prices
From One Identity Active Roles's own pricing page, checked 2 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Active Roles | Priced on request | License fee is based on the number of managed users |
The facts
Each one read from One Identity Active Roles's own pages, with the date it was checked.
What it does
- Auditing
- Change history and activity tracking support audits and remediation.checked 2 Oct 2026
- Automation
- Workflow automation helps implement and enforce consistent policies.checked 2 Oct 2026
- Delegation
- Role-based access control supports fine-grained privilege access across Active Directory domains and Entra ID and Microsoft 365 tenants.checked 2 Oct 2026
- Deployment
- The installation guide describes Active Roles 8.7 system requirements for an on-premises environment.checked 2 Oct 2026
- Integrations
- The product page lists integrations with One Identity Manager, Safeguard Authentication Services, Defender, Change Auditor, GPO Admin, Password Manager and Starling Connect.checked 2 Oct 2026
- Licensing
- A license must be purchased for legal use, and customers can contact their One Identity account team for a quotation.checked 2 Oct 2026
- Lifecycle management
- Lifecycle management uses automation and scripting to provide least privilege for accounts.checked 2 Oct 2026
- Purpose
- Active Roles streamlines administration and governance across Microsoft Active Directory, Entra ID and Microsoft 365.checked 2 Oct 2026
- Support
- The vendor offers product support, support offerings and education services for Active Roles.checked 2 Oct 2026
- Unified console
- The product provides a single interface for managing AD, Entra ID and Microsoft 365.checked 2 Oct 2026
The company
- Founded
- 2007checked 28 Sep 2026
- Headquarters
- Cork, Irelandchecked 28 Sep 2026
Money
- Trial
- The product page offers a free trial and a virtual trial.checked 2 Oct 2026
Alternatives to One Identity Active Roles
- 1

Cayosoft Administrator
AndroidWebAPImacOS7.0 - 2

Softerra Adaxes
Free planWebmacOSSelf-hostedWindows7.0$1,600 one-time - 3
Specops uReset
AndroidiOSWebAPI7.0 - 4
ManageEngine ADSelfService Plus
Free planAndroidiOSWebLinux6.9From $595 a year - 5

ManageEngine AD360
WebWindows6.4 - 6
ManageEngine ADAudit Plus
Free planWebWindows6.4From $595 a year
