In any of the Agent or Admin Roles the option to create and edit anything, should not be in one tick box. They should be separated. We have teams that are allowed to create assets and some that are only allowed to edit. However, these are together so the teams that would normally only be allowed to edit assets are now able to create them as well. Where this should only be done by a specific team.
This is a problem and makes granting access to teams difficult. Do we give them too much access and hope they do not touch or do not create where they shouldn’t or do we remove their access and make more work for another team that would not normally edit these, only create.
Furthermore, we should also be able to drill down in Inventory and only give certain teams access to edit or create certain asset types e.g. Computers and Laptops should only be created by End User Device Coordination and Edited by Tech Support. Services should only be created and edited by Service Architecture. This should be able to be done via the role groups.
