I've just logged this to support, but I'm thinking it might be a Service Manager question rather than Cireson.
Anyone else noticing this?
When we create new AD users (did a couple yesterday), when they import to service manger overnight, the next day they are able to see ALL offerings on Cireson, but only on the first day after creating the account, by the second day (and import run) they are then OK.
On closer inspection it looks like it’s because they’ve not been “scoped” right yet?
If I run the below, it doesn’t bring anything back at all (no rows):
FROM ScopedUser SU
INNER JOIN CI$User U ON SU.UserId=U.Id
Whereas if I run this for any other user (e.g. ones created last week), it does bring back a result.
I’m surmising that it maybe takes two overnight imports for it to create the account in SCSM, then the 2nd import to “scope” it?
It wouldn’t be an issue if it meant they had no access to start with, but having ALL offerings is a little dangerous. (as they can see our test and internal IT forms etc.