managing access to new ticket via AD groups

[adt]

Hi,

Is it possible to manage access of new ticket icon for particular AD groups?

OTRS-2.4.14, Mysql 5.1, Debian 10.0

[reneeb]

yes,

change the group settings for "Frontend::Module###AgentTicketPhone" and "Frontend::Module###AgentTicketEmail" in SysConfig (Ticket -> Frontend::Agent::ModuleRegistration). E.g. create a group "ticket_creator" and set this name in the group settings of both options.

Then create a new role (e.g. TicketCreator) that has rw permissions on the new group.

Then you can use

Code: Select all

   $Self->{'AuthSyncModule::LDAP::UserSyncRolesDefinition'} = {

	# ldap group
	'CN=IT,OU=Groups,OU=IT,OU=Departments' => {
		# otrs role
		'TicketCreator' => 1,
	},

    };

in your config

(note: this is untested)

[adt]

thanks for the reply, but i need it for customers, my question is is it possible to manage the access rights to new ticket icon in customer interface via Active Directory groups? The icon of new ticket should be visible only to customers belonging to specific groups in my AD .

[crythias]

my question is is it possible to manage the access rights to new ticket icon in customer interface via Active Directory groups?

No.

There is no AD Group <-> Customer Group mapping. You can manually assign customers authorized-to-create-tickets to the respective group.

[adt]

Gotcha, thanks crythias!!