I want to grant some users the ability to update the members in a Service Manager Group. I started by creating a user role to grant the user access to the 'Group' view and the 'Properties' task that allows editing the group. The user can see the view, and open the group but when they attempt to save they are told they are not in a user role that is allowed to update the group. I have subsequently tried creating user roles based on 'Advanced Operators' and 'Authors' and granted access to every queue, group, task, etc. and I get exactly the same error. So far, the only method that has worked is to add the user to the 'Administrators' user role. That then gives them way more access than I want them to have. Does anyone know of a workaround, or can anyone confirm that using the 'Administrator' user role is the only choice?
The reason I am doing the above is that I am using Microsoft's 'Application Approval Workflow' so that we integrate with the SCCM 2012 software catalog portal and do any required approvals in Service Manager. I have set a group up for each different software portal we have so that we can just add the applications in the appropriate group that picks the appropriate software approval template. I want our packaging group to maintain the membership of these groups as they roll out new software.
