On Tue, Jun 25, 2019 at 2:37 PM xj04 <[email protected]> wrote: > Hello, > > I am currently using version 1.0 and have it successfully integrated with > Active Directory (am able to login and see other AD users). I am trying to > setup a group with connections in it for users to access. However unless I > set the permissions in the group to "Administer system" users cannot see > any > connections. Obviously I don't want every user to have admin right in > Guacamole. I figure that there is something I am doing wrong or missing. > Right now it's just a single group. I've tried nested groups as well > thinking maybe that would allow me to get around that but it seems > permissions are inherited from the top level group. > > Any ideas on how I can get all users in a group to see a connection without > being an admin in Guacamole? Otherwise I may just have to do it user by > user.
I think you may be confusing connection groups with user groups. Ignoring balancing, connection groups are simply a way to organize connections, similar to a folder/directory. If you want to grant a user access to a connection group and the connections within it, you need to grant the user access to the connection group AND the connections within it. Access to the connection group alone does not imply access to its contents. User groups have the behavior you're looking for. If you have a set of connections that you want a user group to have access to, you can grant that group access to those connections just as you would grant a user access. Any users that are members of that group will then inherit that access. - Mike
