Limiting Access using Active Directory

[SultanOfSwing]

Good morning community,

since we want to extend our OTRS instance with some elaborate process tickets, we are in need of limiting access to certain parts of the process to certain groups. Since I want to keep the rights management as centralized as possible, I want to use AD-security groups in order to give special eprmissions e.g. for our HR people.

When it comes to rights managegent in OTRS, I am pretty green. Is it possible to to link ACLs, groups and roles to certain security groups in our AD? That way we could just manage access using the AD instead of fiddeling around in OTRS.

Is such a thing possible?

Best regards


Fabian

[crythias]

Check Kernel/Config/Defaults.pm
Copy the sections to Kernel/Config.pm relevant to AuthSyncModule::LDAP::UserSyncGroupsDefinition or UserSyncRolesDefinition (or other parts that are relevant to your request)

Acl, not directly to LDAP, but group or role membership, yes.

[SultanOfSwing]

Thanks, at first glance that seems like it will do the trick!

Mapping roles and groups to AD-groups seems close enough. Once the OTRS config is clean, I should be able to bounce users around in the AD and change permissions using that.