teamviewer / AD-Connector

A PowerShell integration script to synchronize users of Active Directory groups to a TeamViewer company via REST based API.

Home Page:https://www.teamviewer.com/en/integrations/active-directory/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Permission synchronization and new button "Add Device Groups

mweimert opened this issue · comments

Hello,

my inquiry would be:
In the synchronization area another field with a filter for the added AD groups permissions.
In the 3rd tab another checkbox with the name "Add devices group".

Background thoughts on this:
Active Directory

One has an OU as an example :
CN=ACL_APK_TeamViewer_IT,OU=TeamViewer,OU=Applications,OU=Groups,DC=your,DC=domain
in this OU you have groups for example ACL_APK_TeamViewer_IT in which the users are directly in or are members via a nested group and fetch them. (Already existing)

In the TeamViewer OU another OU, example:
CN=ACL_APK_TeamViewer_Permission_IT,OU=01_Permission,OU=TeamViewer,OU=Applications,OU=Groups,DC=your,DC=domain

Here the groups for role management synchronized and permissions are defined.
Group in 01_Permission example:
ACL_APK_TeamViewer_Permission_Standard-User
ACL_APK_TeamViewer_Permission_Admin
Thus, this role / permissions created is assigned to

If then the group ACL_APK_TeamViewer_IT is a member of the group ACL_APK_TeamViewer_Permission_Admin, he has the permissions and therefore the access to a device group that was set.

TeamViewer / AD-Connector
If the checkbox is active it should get the members of these (example ACL_APK_TeamViewer_IT) groups, create device groups, name them with the attribute "cn" and add the users or user groups that are in the AD groups.

Or is there another way to automate this further.

Thank you in advance.

AD-Connector_Group

AD-Connector_Syncronization