Blazam
About
Blazam is a free, open-source web interface for assigning Active Directory tasks to non-IT staff. It covers users, groups, organizational units, computers and printers, including account unlocks, password resets, group assignments and attribute edits. Administrators can set reusable access levels for groups or individuals, with controls over specific actions and attributes. Rule-based actions can respond to events or run on schedules, using filters, ordered processing, conditional stops and expiration settings. A REST API and webhook notifications are listed, along with MFA through Cisco DUO or Google Authenticator-compatible TOTP. Its documentation describes encryption for passwords at rest and in transit, TLS/SSL connections and operation under an unprivileged account. Windows installation supports IIS or a standalone service; Linux installation supports Apache, nginx or a standalone service. Blazam requires Active Directory and a domain-joined Windows host, and recommends a well-defined OU structure for granular delegation. Installing it on a Domain Controller is not recommended. The free plan is 0.00 USD per free; the software is MIT licensed for personal and commercial use.
Who it is for
Blazam suits system administrators who want to delegate routine Active Directory work to nontechnical staff, including organizations with limited funding. It requires an Active Directory environment and a domain-joined Windows host.
What is good
- Free and MIT licensed for personal and commercial use
- Delegates specific actions and attributes
- Automates actions on events or schedules
- Offers a REST API and webhook subscriptions
- Documents several database options
What to know first
- Requires Active Directory and a domain-joined Windows host
- A well-defined OU structure is needed for granular delegation
- Domain Controller installation is not recommended
- API tokens can only be created by admins for existing users
Verdict
Blazam combines delegated Active Directory administration with scheduled or event-driven actions, while providing controls over permissions at the action and attribute level. Its deployment depends on an existing Active Directory setup and careful OU structure.
Compared on active directory management software
- Free plan
- Yesblazam.org
- Deployment
- on_premisesblazam.org
- Delegated administration
- Yesblazam.org
- AD auditing
- Yesblazam.org
- Lifecycle automation
- Yesblazam.org
- Reporting
- Yesblazam.org
- Password self-service
- Yesblazam.org
Facts
- Purpose
- Blazam is a free, open-source web interface for delegating Active Directory management to non-IT staff.blazam.org · 30 Sept 2026
- Directory management
- It manages users, groups, organizational units, computers, and printers, including account unlocks, password resets, group assignments, and attribute changes.blazam.org · 30 Sept 2026
- Permissions
- Reusable access levels can be applied to groups or individual users, with per-attribute and per-action permission controls.blazam.org · 30 Sept 2026
- Automation
- Rule-based Active Directory actions can run in response to events or on schedules, with filters, ordered processing, conditional stops, and expiration settings.blazam.org · 30 Sept 2026
- Integrations
- The site lists a REST API and webhook notification subscriptions; it also describes MFA through Cisco DUO or Google Authenticator-compatible TOTP.blazam.org · 30 Sept 2026
- Security
- The documentation says passwords are encrypted at rest and in transit, connections support TLS/SSL, and the app is designed to run under an unprivileged account.docs.blazam.org · 30 Sept 2026
- Install options
- The Windows installer can install under IIS or as a standalone service, while the Linux installer supports Apache, nginx, or a standalone service.docs.blazam.org · 30 Sept 2026
- Deployment requirement
- Blazam requires Active Directory and a domain-joined Windows host, and its documentation says a well-defined OU structure is imperative for granular delegation.docs.blazam.org · 30 Sept 2026
- Notable deployment limit
- The documentation says installing Blazam on a Domain Controller is not recommended.docs.blazam.org · 30 Sept 2026
- Database options
- Documented database options include SQLite, MSSQL Express, MariaDB, MSSQL, and MySQL; the requirements page lists recommended concurrent-user ceilings for each.docs.blazam.org · 30 Sept 2026
- API limit
- API tokens inherit the permissions of the Blazam user and can currently only be created by admins for existing Blazam users.docs.blazam.org · 30 Sept 2026
- Support
- The maker lists [email protected] as its contact address.blazam.org · 30 Sept 2026
- Audience
- The maker describes Blazam as designed for overworked system administrators and organizations with limited funding, and says it supports nontechnical users with tasks otherwise handled by technical staff.blazam.org · 30 Sept 2026
Best Blazam alternatives
See all 12
5.4 ManageEngine AD360 See plans price on the maker's page Free trial
5.4 Softerra Adaxes See plans price on the maker's page Free trial
5.3 Cayosoft Administrator See plans price on the maker's page Free trial
5.3 Netwrix Password Secure $5/mo first paid tier Where it ranks on Inferse
Sources
- blazam.org· checked 30 Sept 2026
- blazam.org/features· checked 30 Sept 2026
- docs.blazam.org/install/security/· checked 30 Sept 2026
- docs.blazam.org/install/web/· checked 30 Sept 2026
- docs.blazam.org· checked 30 Sept 2026
- docs.blazam.org/install/requirements/· checked 30 Sept 2026
- docs.blazam.org/admin/api/· checked 30 Sept 2026
- blazam.org/about· checked 30 Sept 2026




