Questions about Assigning Global Group Rights

I am currently playing around with RT (Currently using RT 3.0.3)

I generated the following list of various rights to assign.

There are some questions embedded in the list (and at the end of
the list), but I’m also kind of interested in whether I am
assigning excessive or incomplete rights.

Global -> Group Rights:

System Groups:  Everyone

   CreateTicket
   CommentOnTicket
   ReplyToTicket

System Groups:  Privileged

   ModifySelf
   ShowTicket
   <I assume they inherit the Everyone rights>


Roles:    Requestor

   ShowTicket

Roles:    CC

   ?? What rights should they get ??

Roles:    AdminCC

   ?? What rights should they get ??


User Defined Groups:  <*A - An RT admin group>

   AdminCustomFields
   AdminGroup
   AdminGroupMembership
   AdminQueue
   AdminUsers
   ModifyScrips
   ModifyTemplate
   ShowACL
   ShowScrips
   ShowTemplate

User Defined Groups:  <*B - A group with assign ability>

   ModifyTicket
   ModifyQueueWatchers
   SeeQueue

User Defined Groups:  <*C - A group with answer/comment ability>

   CommentOnTicket
   CreateTicket
   ModifySelf
   OwnTicket
   ReplyToTicket
   SeeQueue
   ShowTicket
   ShowTicketComments
   StealTicket
   TakeTicket
   Watch

*A: An RT admin group - this would have users that would be responsible
for creating new queues, scrips, templates and users.

*B: A group with assign ability - this would be a group that would monitor
a queue and assign tickets to other users for resolution.

*C: A group with answer/comment ability - this would be the group actually
resolving the tickets. Presumably they could assign themselves a ticket
(TakeTicket right)

Questions:

A. Are any of these groups missing rights?

B. Should the User Defined Group B have most of the User Defined Group C
rights as well? Or does ModifyTicket essentially give them most of
the other Ticket rights?

C. When would you want to assign the “WatchAsAdminCC” right? (The comment
in the docs “Like Watch, but only as an Admin” is not very clear :slight_smile:

D. When would you want to assign the following rights?

  AdminGroupMembership
  DelegateRights

Thanks,
Dave Fandel
Sr Developer (BIG development)