Confusing Users, Groups, Roles

Moderator: crythias

Post Reply
disciple
Znuny newbie
Posts: 62
Joined: 31 Jul 2022, 12:27
Znuny Version: 6.4.2
Real Name: David Müller

Confusing Users, Groups, Roles

Post by disciple »

I am trying to understand the concept of Znuny's Users, Groups and Roles mapping.

Somehow I can map everything with everything.

Let me try to explain my viewpoint and maybe Znuny has a different?

A user has in our business one or many Roles.
A role makes him to be part of specific Groups

So I would expect here a one to many mapping from Role to Group
So the user would have at least one Role, this role provides him access to one or multiple Groups and this groups provide him access to specific functions in Znuny.

Of course I could skip the Roles at all, but this makes it really hard to understand to someone, what effective permissions the user have, if the mapping over a Role is not available.

Is this the right viewpoint?
I could not get more details about this from the Znuny documentation.
Johannes
Moderator
Posts: 391
Joined: 30 Jan 2008, 02:26
Znuny Version: All of them ^^
Real Name: Hannes
Company: Znuny|OTTERHUB

Re: Confusing Users, Groups, Roles

Post by Johannes »

Sounds about right to me.

Agent<>Role(s)<>Group(s)<>Queues(other functions, Reporting, ITSM and so on)

An agent can also be in multiple Roles, without a problem.

So you can have a clean setup like:
Roles:
- 1st Level (rw on 1st Level queues, ro in 2nd Level)
- 2nd Level (rw in 2nd Level)
- Reporting (rw in stats)

You can then assign multiple roles to users:
- employee 1st Level gets only the Role 1st level
- employee in 2nd Level gets 1st Level AND 2nd Level
- Manager gets 1st+2nd+reporting

Regards
Johannes
disciple
Znuny newbie
Posts: 62
Joined: 31 Jul 2022, 12:27
Znuny Version: 6.4.2
Real Name: David Müller

Re: Confusing Users, Groups, Roles

Post by disciple »

thank you for your answer.
Good checkmark for my understanding.

if this is the case the UI workflow is really strange.

The UI implies, that the user has to be assigned to a group. But the UI shall provide the steps from Users to assign Roles.
owi
Znuny newbie
Posts: 22
Joined: 20 May 2021, 17:14
Znuny Version: 6.4.2
Real Name: Othmar Wigger
Company: terreActive AG
Location: Aarau, Switzerland
Contact:

Re: Confusing Users, Groups, Roles

Post by owi »

disciple wrote: 10 Aug 2022, 13:37 The UI implies, that the user has to be assigned to a group. But the UI shall provide the steps from Users to assign Roles.
Both is possible!

User -> Group
User -> Role -> Group

A user does not need to have any role at all. Direct group membership is possible.

Regard roles as "collections of groups", for the administrative convenience.
disciple
Znuny newbie
Posts: 62
Joined: 31 Jul 2022, 12:27
Znuny Version: 6.4.2
Real Name: David Müller

Re: Confusing Users, Groups, Roles

Post by disciple »

owi wrote: 10 Aug 2022, 14:59 Both is possible!
yes seen this, but this makes it also so confusing if you are a starter.
But now I have clearance to move ahead with roles
Post Reply