Travis, thanks for confirming that so I quit pursuing that path. From: [email protected] [mailto:[email protected]] On Behalf Of Travis Wright Sent: Friday, September 06, 2013 2:19 PM To: [email protected] Subject: [servman] RE: Create User Role to Allow Specific Users to Update Members in a Group
Only users in the Administrator user role can edit group membership. That is because groups (and queues) are security boundaries. Granting somebody permission to edit the membership of a group (or queue) effectively gives them the ability to change security scoping. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Presley, Dow Sent: Friday, September 6, 2013 11:15 AM To: [email protected]<mailto:[email protected]> Subject: [servman] Create User Role to Allow Specific Users to Update Members in a Group I want to grant some users the ability to update the members in a Service Manager Group. I started by creating a user role to grant the user access to the 'Group' view and the 'Properties' task that allows editing the group. The user can see the view, and open the group but when they attempt to save they are told they are not in a user role that is allowed to update the group. I have subsequently tried creating user roles based on 'Advanced Operators' and 'Authors' and granted access to every queue, group, task, etc. and I get exactly the same error. So far, the only method that has worked is to add the user to the 'Administrators' user role. That then gives them way more access than I want them to have. Does anyone know of a workaround, or can anyone confirm that using the 'Administrator' user role is the only choice? The reason I am doing the above is that I am using Microsoft's 'Application Approval Workflow' so that we integrate with the SCCM 2012 software catalog portal and do any required approvals in Service Manager. I have set a group up for each different software portal we have so that we can just add the applications in the appropriate group that picks the appropriate software approval template. I want our packaging group to maintain the membership of these groups as they roll out new software.
