Survey App - Domain Users

Dan_Styan

Hello,

For ages now I've been trying to work out why a non administrators can open up the SCSM Management Console and can see views - Okay they are all empty, but they are not getting a prompt to enter different credentials, if by some magic an end user has SCSM Management Console installed.

The problem is the Survey App End User user role needs to be an advanced operators with domain users inside, when removing this and then I try to open SCSM MC I get asked for a prompt to log in, which is great.

Is there a better of the user role not needing to be an advanced operator?

seth_coussens

The problem we have that led to this requirements is that the end user needs to be able to create a CI in the environment in order to save a new survey result. You can't do this normally as an end user, so we use a scoped down advanced operator role as this allows this. By scoping it down we remove the security implications.

I've heard of success with people defining other lower roles and scoping them down, but they haven't been consistent in our testing.

Regardless, to help you with this the reason for the role setup is because the end user needs to be able to create a new CI of the Survey Result class.

seth_coussens

The problem we have that led to this requirements is that the end user needs to be able to create a CI in the environment in order to save a new survey result. You can't do this normally as an end user, so we use a scoped down advanced operator role as this allows this. By scoping it down we remove the security implications.

I've heard of success with people defining other lower roles and scoping them down, but they haven't been consistent in our testing.

Regardless, to help you with this the reason for the role setup is because the end user needs to be able to create a new CI of the Survey Result class.