Blazam
What it is
Blazam is a free, open-source web interface for delegating Active Directory administration to non-IT staff. It covers users, groups, organizational units, computers, and printers, with actions that include unlocking accounts, resetting passwords, assigning groups, and changing attributes. Administrators can apply reusable access levels to groups or individuals and define permissions for specific attributes and actions. Rules can trigger Active Directory tasks on events or schedules, using filters, ordered processing, conditional stops, and expiration settings. Blazam also lists a REST API, webhook notifications, and multifactor authentication through Cisco DUO or Google Authenticator-compatible TOTP. Its documentation describes encryption at rest and in transit, TLS/SSL connections, and operation under an unprivileged account. Windows installation options include IIS or a standalone service; Linux options include Apache, nginx, or a standalone service. It requires Active Directory and a domain-joined Windows host, and a well-defined OU structure is needed for granular delegation. Installing it on a Domain Controller is not recommended.
For and against
For
- Free and open-source, with no charge for use.
- Delegates user, group, computer, and printer management.
- Reusable access levels control actions and attributes.
- Rules can run on events or schedules.
- Windows and Linux installation options are listed.
Against
- Requires Active Directory and a domain-joined Windows host.
- Granular delegation depends on a well-defined OU structure.
- Installing on a Domain Controller is not recommended.
- API tokens can only be created by admins for existing users.
The verdict
Blazam provides a free way to delegate selected Active Directory tasks while retaining permissions controls and rule-based automation. Deployment depends on an existing Active Directory environment and a suitable domain-joined host.
Who it suits
Blazam may suit system administrators who want nontechnical colleagues to handle selected Active Directory tasks, including at organizations with limited funding. It is intended for deployments with Active Directory and a domain-joined Windows host.
Plans and prices
Free and Open Source
Completely free of charge · MIT licensed for personal and commercial use
Read 30 Sep 2026 · blazam.org
On the record
- API limit
- API tokens inherit the permissions of the Blazam user and can currently only be created by admins for existing Blazam users.docs.blazam.org · read 30 Sep 2026
- Audience
- The maker describes Blazam as designed for overworked system administrators and organizations with limited funding, and says it supports nontechnical users with tasks otherwise handled by technical staff.blazam.org · read 30 Sep 2026
- Automation
- Rule-based Active Directory actions can run in response to events or on schedules, with filters, ordered processing, conditional stops, and expiration settings.blazam.org · read 30 Sep 2026
- Database options
- Documented database options include SQLite, MSSQL Express, MariaDB, MSSQL, and MySQL; the requirements page lists recommended concurrent-user ceilings for each.docs.blazam.org · read 30 Sep 2026
- Deployment requirement
- Blazam requires Active Directory and a domain-joined Windows host, and its documentation says a well-defined OU structure is imperative for granular delegation.docs.blazam.org · read 30 Sep 2026
- Directory management
- It manages users, groups, organizational units, computers, and printers, including account unlocks, password resets, group assignments, and attribute changes.blazam.org · read 30 Sep 2026
- Install options
- The Windows installer can install under IIS or as a standalone service, while the Linux installer supports Apache, nginx, or a standalone service.docs.blazam.org · read 30 Sep 2026
- Integrations
- The site lists a REST API and webhook notification subscriptions; it also describes MFA through Cisco DUO or Google Authenticator-compatible TOTP.blazam.org · read 30 Sep 2026
- Notable deployment limit
- The documentation says installing Blazam on a Domain Controller is not recommended.docs.blazam.org · read 30 Sep 2026
- Permissions
- Reusable access levels can be applied to groups or individual users, with per-attribute and per-action permission controls.blazam.org · read 30 Sep 2026
- Purpose
- Blazam is a free, open-source web interface for delegating Active Directory management to non-IT staff.blazam.org · read 30 Sep 2026
- Security
- The documentation says passwords are encrypted at rest and in transit, connections support TLS/SSL, and the app is designed to run under an unprivileged account.docs.blazam.org · read 30 Sep 2026
- Support
- The maker lists [email protected] as its contact address.blazam.org · read 30 Sep 2026
