Permission synchronization and new button "Add Device Groups
mweimert opened this issue · comments
Hello,
my inquiry would be:
In the synchronization area another field with a filter for the added AD groups permissions.
In the 3rd tab another checkbox with the name "Add devices group".
Background thoughts on this:
Active Directory
One has an OU as an example :
CN=ACL_APK_TeamViewer_IT,OU=TeamViewer,OU=Applications,OU=Groups,DC=your,DC=domain
in this OU you have groups for example ACL_APK_TeamViewer_IT in which the users are directly in or are members via a nested group and fetch them. (Already existing)
In the TeamViewer OU another OU, example:
CN=ACL_APK_TeamViewer_Permission_IT,OU=01_Permission,OU=TeamViewer,OU=Applications,OU=Groups,DC=your,DC=domain
Here the groups for role management synchronized and permissions are defined.
Group in 01_Permission example:
ACL_APK_TeamViewer_Permission_Standard-User
ACL_APK_TeamViewer_Permission_Admin
Thus, this role / permissions created is assigned to
If then the group ACL_APK_TeamViewer_IT is a member of the group ACL_APK_TeamViewer_Permission_Admin, he has the permissions and therefore the access to a device group that was set.
TeamViewer / AD-Connector
If the checkbox is active it should get the members of these (example ACL_APK_TeamViewer_IT) groups, create device groups, name them with the attribute "cn" and add the users or user groups that are in the AD groups.
Or is there another way to automate this further.
Thank you in advance.