Options
Survey App - Domain Users
Dan_Styan
Customer IT Monkey ✭
Hello,
For ages now I've been trying to work out why a non administrators can open up the SCSM Management Console and can see views - Okay they are all empty, but they are not getting a prompt to enter different credentials, if by some magic an end user has SCSM Management Console installed.
The problem is the Survey App End User user role needs to be an advanced operators with domain users inside, when removing this and then I try to open SCSM MC I get asked for a prompt to log in, which is great.
Is there a better of the user role not needing to be an advanced operator?
For ages now I've been trying to work out why a non administrators can open up the SCSM Management Console and can see views - Okay they are all empty, but they are not getting a prompt to enter different credentials, if by some magic an end user has SCSM Management Console installed.
The problem is the Survey App End User user role needs to be an advanced operators with domain users inside, when removing this and then I try to open SCSM MC I get asked for a prompt to log in, which is great.
Is there a better of the user role not needing to be an advanced operator?
0
Best Answer
-
Options
seth_coussens
Member Ninja IT Monkey ✭✭✭✭
The problem we have that led to this requirements is that the end user needs to be able to create a CI in the environment in order to save a new survey result. You can't do this normally as an end user, so we use a scoped down advanced operator role as this allows this. By scoping it down we remove the security implications.
I've heard of success with people defining other lower roles and scoping them down, but they haven't been consistent in our testing.
Regardless, to help you with this the reason for the role setup is because the end user needs to be able to create a new CI of the Survey Result class.5
Answers
I've heard of success with people defining other lower roles and scoping them down, but they haven't been consistent in our testing.
Regardless, to help you with this the reason for the role setup is because the end user needs to be able to create a new CI of the Survey Result class.