What you would have to do is try installing an ITSM7 (Service Desk, to get the Foundation data), and create two companies. Leave the overall admin accounts, Demo and appadmin, in My Company for whoever is going to be administering the AR Server, and build a complete company for each division. Create a division admin with all of the application admin rights and limited ARS rights in each company, and test to see if each one has enough functionality in its own company but has no visibility or rights to the other. By definition that means that they cannot be unrestricted = Yes.
Some server level configurations could still trip you up; AREA LDAP integration is at the server level, not the application, so if the divisions are on separate authentication systems that could be a problem, although you can configure more than one LDAP source (I do it for failover). Accounts can all reside in CTM:People and User but if they are homed in separate companies they do not have any permissions to the other company. Beware that ITSM 7 is NOT using row level locking except on the customer company, but that is only a problem if you are trying to have users see across companies, which should not be the case in your environment. My assumption is that you will hit a number of issues at the AR Server level since it is a single environment, and with respect to the permissions that the division admins must have to have in order to do their work. I’m afraid that some of the roles that they must have may be more global than you want them to be. The questions are going to revolve around what you can work around, or what you just have to live with. It _might_ be able to be done, but only a test implementation will be able to prove that. Christopher Strauss, Ph.D. Call Tracking Administration Manager University of North Texas Computing & IT Center http://itsm.unt.edu/ <http://itsm.unt.edu/> From: Action Request System discussion list(ARSList) [mailto:[EMAIL PROTECTED] On Behalf Of Kathy Morris Sent: Wednesday, June 04, 2008 5:45 PM To: arslist@ARSLIST.ORG Subject: Re: Configure Two Divisions On Server ** Can this be done in a way that neither administrator can change the configuration of the other application that resides on the same server. -----Original Message----- From: strauss <[EMAIL PROTECTED]> To: arslist@ARSLIST.ORG Sent: Wed, 4 Jun 2008 2:25 pm Subject: Re: Configure Two Divisions On Server ** Then make sure that they understand that there will be no sharing of data of any kind, or transferring of tickets, etc., between the two divisions if they set up independent systems (without significant additional customization on both systems to achieve that, of course). If any IT services or data sources are ever centralized, their inclusion in each application will have to be done separately. You might take out some insurance against a future where someone wants to consolidate the two systems by adding division-specific prefixes to Request Ids, but the underlying Entry IDs are going to overlap. Each division will also bear the cost of an entire set of servers (include two development environments) and licenses – nothing will be reusable between the divisions. It is the “simple” solution if you have the resources to duplicate everything. If they are under completely different financial and auditing requirements or laws it may, in fact, be the only way to be in compliance with those regulations. Christopher Strauss, Ph.D. Call Tracking Administration Manager University of North Texas Computing & IT Center http://itsm.unt.edu/ <http://itsm.unt.edu/> From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG <mailto:[EMAIL PROTECTED]> ] On Behalf Of Kathy Morris Sent: Wednesday, June 04, 2008 4:06 PM To: arslist@ARSLIST.ORG <mailto:arslist@ARSLIST.ORG> Subject: Re: Configure Two Divisions On Server ** I know what you mean - but they do not want to have a central team. Each division wants their own administrators and they want the two administrators to be completely independant without the ability to do any damage to the other division's system. Might be an over-simplified suggestion, but why not activate multi-tenancy, have one server, and one central team to administer it for both divisions? -----Original Message----- From: Kaiser Norm E CIV USAF 96 CS/SCCE <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > To: arslist@ARSLIST.ORG <mailto:arslist@ARSLIST.ORG> Sent: Wed, 4 Jun 2008 1:44 pm Subject: Re: Configure Two Divisions On Server Might be an over-simplified suggestion, but why not activate multi-tenancy, have one server, and one central team to administer it for both divisions? -----Original Message----- From: Action Request System discussion list(ARSList) __Platinum Sponsor: www.rmsportal.com <http://www.rmsportal.com/> ARSlist: "Where the Answers Are" html___ __Platinum Sponsor: www.rmsportal.com <http://www.rmsportal.com/> ARSlist: "Where the Answers Are" html___ _____ Stay informed, get connected and more with AOL on your phone <http://mobile.aol.com/productOverview.jsp?productOverview=aol-mobile-overview&?&ncid=aolmbd00030000000139> . __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" html___
