Designers with and without access to TARGIT Managemenet

Thomas Veit

May 16, 2023 14:16

Dear community,

we wanted to reduced the administrartion of user RIGHTS in TARGIT management and defined the two AD groups "Designers" and "Consumers".

The "Designers" had NO ACCESS to TARGIT Management and we granted the right to access TARGIT Management to some specific users.

... but this didn't work, access was denied.

So my questions:
Would it be a solution to create a second role "Designers with Management" access and grant this right to selected users?

Kind regards

Thomas

1 comment

Ole Dyring
May 17, 2023 06:06 (Edited May 17, 2023 06:08)
Hi Thomas,

This is probably the way I would do it:
1. Create three AD groups: TARGIT Consumers, TARGIT Designers, TARGIT Managers. Members of the Managers group should probably also be members of the Designers group.
2. Create three Rights groups in TARGIT: Consumers (with the TARGIT Consumers AD group added to it), Designers (with the TARGIT Designers AD group added to it) and Managers (with the TARGIT Managers AD group added to it).
3. The Consumer Rights group should only grant access to the Consumer Rights. Everything else should be 'None in these rights'. (Do not use 'Deny in all rights'.)
4. The Designer Rights group should only grant access to Designer + Advanced + Consumer Rights. 'Management client to manage server' should be 'None in these rights'. (Do not use 'Deny in all rights'.)
5. The Manager Rights group should only grant access to 'Management client to manage server' and nothing else. Everything else should be 'None in these rights'. (Do not use 'Deny in all rights'.)
BR / Ole
0

Please sign in to leave a comment.

New post