We are an outsourcing shop performing network maintenance and help desk services for a growing number of clients. We would like to implement the Customer Interface, so customers can both track their own trouble tickets and create new trouble tickets when their email system is down. (Normally, we have each client set up an account 'trouble@client-domain.com' on their own email system, and then we have OTRS pull down emails sent to these 'trouble' addresses. We dispatch these emails by queue, so emails sent to trouble@Client-One.com wind up automatically in the Client-One::Incoming queue.) But, we only want clients to see tickets in their own company's queues. Each client has a top queue with the name of the client, and then three sub-queues: Incoming, Closed and Invoiced (my favorite!) We tried the Groups feature, but it seems to be only for Agent accounts, not Customer accounts. Maybe we didn't use this correctly. So, how do I set permissions so that: 1. Customers that self-register can't see any queues until I give them permission, and; 2. Customers for whom I have set permissions can only see tickets in their own Incoming, Closed and Invoiced queues, and; 3. I can allow a Customer's chief financial officer to see all three sub-queues, but regular customer users can only see Incoming and Closed sub-queues? We are not using LDAP or any other external authentication other than what is built in to the product and MySQL. Thanks for a terrific product!! Happy New Year to all! Mark -- ______________________________________________________________ L. Mark Stone President Reliable Networks of Maine, LLC 477 Congress Street, 5th Floor Portland, ME 04107 Tel: (207) 772-5678 Cell: (917) 597-2057 Email: LMStone@RNoME.com Web: http://www.RNoME.com