My main reasoning for OTRS is to automate
as much as possible, I’d prefer not to have first level agents triaging every
single issue.
Below is an example of hour I sorted the groups
based on AD (any queue name company specific has been removed, incase you were
wondering why the logic didn’t make a whole lot of sense).
Hope that helps.
$Self->{'AuthSyncModule::LDAP::UserSyncGroupsDefinition'} = {
# ldap group
'CN=Group_A,OU=xxx,OU=Groups,DC=ld,DC=corp,DC=local'
=> {
# otrs group
'faq' => {
rw => 1,
ro => 1,
},
'faq_admin' => {
rw => 1,
ro => 1,
},
'stats' => {
rw => 1,
ro => 1,
},
'users' => {
rw => 1,
ro => 1,
},
},
'CN=Group_B,OU=xxx,OU=Groups,DC=ld,DC=corp,DC=local'
=> {
'faq' => {
rw => 1,
ro => 1,
},
'faq_admin' => {
rw => 0,
ro => 0,
},
'stats' => {
rw => 0,
ro => 0,
},
},
'CN=Group_C,OU=xxx,OU=Groups,DC=ld,DC=corp,DC=local'
=> {
'faq' => {
rw => 0,
ro => 0,
},
'faq_admin' => {
rw => 0,
ro => 0,
},
'stats' => {
rw => 0,
ro => 0,
},
'users' => {
rw => 0,
ro => 0,
},
},
'CN=Group_C,OU=xxx,OU=Groups,DC=ld,DC=corp,DC=local'
=> {
'Random Group' => {
rw => 1,
ro => 1,
},
},
'CN=Group_D,OU=xxx,OU=Groups,DC=ld,DC=corp,DC=local'
=> {
'admin' => {
rw => 1,
ro => 1,
},
}
};
--John
From:
otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Leonardo Certuche
Sent: Wednesday, December 16, 2009
3:39 PM
To: User questions and discussions
about OTRS.
Subject: Re: [otrs] Settings
Customer Group Permissions via LDAP.
Hi John,
I don't know if it fits your environment but what we did was to give customers
permissions to a single queue which is managed by a group of first level agents
who route tickets to the other queues.
About your 'Agent 1 can see queue A, and Agent 2 can see queue B, but
not vice versa' configuration, I'd love if you share it with us,
I tried that but never worked for me, probably knowing your working
configuration will help (not only me) to accomplish it :)
regards,
Leonardo Certuche
On Wed, Dec 16, 2009 at 6:01 PM, John Stafford <JStafford@londondrugs.com>
wrote:
I would like
customers to only be able to see certain queues based on their permission
settings via groups in AD. I already have this working for agents (Agent 1 can
see queue A, and Agent 2 can see queue B, but not vice versa). I need this for
customers as well, as I don’t to overwhelm customers with too many queues to
choose from (and I have too many thousands of customers to do this manually).
Has anyone
else solved this?
Thanks,
--John
---------------------------------------------------------------------
OTRS mailing list: otrs - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/otrs
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/otrs
NEW!
http://www.otrs.com/en/support/enterprise-subscription/