I agree, security is of issue from the requester / support staff standpoint.

I'd suggest searching the archives, as this has been discussed in the past. The 
issue is a big one...

________________________________________
From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] 
On Behalf Of Don McClure
Sent: Friday, June 29, 2007 7:34 AM
To: [email protected]
Subject: Re: ITSM 7 Requestor accounts

Philip,
 
Our work with ARS7/ITSM7 has led us along similar lines--multi-tenancy,
with a company/group strata within the University (33,000+ students and
approx 300 support staff).
 
By our experience:  a ticket will always be visible to its submitter, regardless
of company affiliation of that submitter--so tickets which MUST remain hidden 
within a particular company need to be:
- created by a support staffer within that company, on a customer's behalf,
if appropriate; and
- NEVER assigned outside that company.
 
As for associating requesters with more than one company:  A particular
login ID will see tickets for any company where they have visibility (access)--
hence the two observations above.  Further--a support staffer can have as 
many login IDs as the admin is willing to maintain , and give each ID access
only to a particular company (in fact, login ID is the only field in 
Person Information which must be unique).
 
We are also working on an extensive customer-company architecture to
co-operate with the multi-tenancy support structure.  Again, these are 
observations from our experience in architecting ITSM 7 to a University 
IT-support role.
You are welcome to contact me off-list for any further details.
 
Don W. McClure, P.E.
Systems Engineer
University of North Texas
dwmac_at_unt.edu
940.565.3287
 
"Not everything that can be counted counts, and not everything that counts can 
be counted."
(Albert Einstein)
 
>>> "Boucher, Philip" <[EMAIL PROTECTED]> 29-Jun-07 4:03 AM >>>
We are preparing to implement ITSM 7 using the multi-tenancy mode.

We need to structure our internal organisation into different companies
to 
allow data to be segregated. For example IT, HR, Finance.  In this way
only 
HR will have visibility of the HR tickets.

Our issue with this approach is that we would need to duplicate the 
requestor accounts for each of the internal companies. For example a
user 
would need a requestor account created for IT, HR and Finance to be able
to 
log tickets against these companies. Eg  IT.Requestor, HR.Requestor and 
Finance.Requestor.

Is it possible to associate requestors with more than one company using 
ITSM 7? Or will we need a customisation, if so has anyone solved this
issue.

Thanks

Phil


This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail and any attachment and all 
copies and inform the sender. Thank you.

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the 
Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org ARSlist:"Where the 
Answers Are"

Reply via email to