Jump to content

Recommended Posts

Posted

The only option we have for the idea of copying permissions is to copy from another User. IT Security people don't like us copying from other Users as other Users may have unnecessary permissions for new users; but copying from an agreed Template is acceptable.

At present, User Templates are not useful for me because our users are created with AD imports and you can only use them when manually creating a new User.

However, I would like to use Templates to alter permissions when someone becomes a Full User, gets promoted or otherwise changes roles or teams).

Could Hornbill please enable a Copy from Template in the Role Assignment feature?

Posted

We are using the Hornbill Import scripts but at the time we import we don't always know the exact role so specifying a template then won't always help.

The point I am driving at is the ability to apply a standard set of Roles to the profile AFTER the user has been created; also allowing for people to change jobs and get a 'standard' set of perms for the new role rather than us having to manually cobble it together by comparing someone else.

Or maybe you're about to tell me the import scripts can be used to give a user a new set of perms during sync of an existing user rather than just at the point of creation?

Posted

If you configure the scripts correctly, probably separating out the Create script from the Update script, you can have different Roles for a newly created User and an Updated User.

If you make the scripts more granular you can update based on Group Membership (or any searchable LDAP parameter) by using precise LDAP queries in the import, so an Employees moving Job Roles will have their Hornbill privileges updated to match as long as you update AD accordingly.

  • 9 months later...
Posted
15 minutes ago, HHH said:

+1 and also to be able to apply roles from template as part of BPM

+1 Currently need configure multiple nodes to add each relevant role to apply to users via the BPM. Would be good to use templates that has a collection of roles instead (then allows for updating the template outside of the BPM once and the changes will be reflect in future requests).

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...