Group Rights Issue

[randommantis]

I’m having an issue with group rights, no matter how many rights I give a group it doesnt actually give them the rights. The only rights that work are making someone a full privelleged user.

[Jeff_Voskamp1]

Only a full privileged user gets user/group rights.
Unprivileged users get rights for the everyone & unprivileged groups.

[randommantis]

So I have to make each person privilleged before they can get their group rights? If so is there a fast way to do this?

[periway]

Hi,

You can privileged user by multiple way:

If you want privileged all your imported user:

Make users created from LDAP Privileged

Set( $UserAutocreateDefaultsOnLogin, { Privileged => 1 } );

If you want privileged only some users, you will have to be a little creative and play with CLI or API:

Personnaly I import and update users group from LDAP.
https://docs.bestpractical.com/rt/5.0.4/RT/LDAPImport.html

Then i use a shell script from make a request with ldaputils utility on my LDAPs groups. Then i loop for each user i call the API to give him privileged right.

Add groups memberships with API REST2

Self answer, i havent clearly read the documentation : PUT /group/:id/members add members to a group; provide a JSON array of principal ids PUT /user/:name/groups add a user to groups; provide a JSON array of groups ids First give privileged right to a user because i want give them the right to manage a queue: curl -X PUT -H “Content-Type: application/json” -d ‘{ “Privileged” : “1” }’ -H ‘Authorization: token 123456789’ ‘https://mycorp.org/REST/2.0/user/joe’ Then add my user joe to the …

A cron task did the job everynight.

Now i only have to add user in my ldap group to see them appear in RT with the good rights.

Kind regards,

[randommantis]

Thank you, I will look into this.