+6When scoping visibility to resources (specifically the Service Catalog), you run the risk of over-provisioning access to users when having to scope Requester Groups and Agent Groups separately.
For example, if I want a request form visible to Engineers and some Engineers are Agents, I would have to include Agent groups that the Engineers are a member of that may include non-Engineers.
+2Agree. Right now we are sometimes creating two groups to be able to narrow the access down the way we want it.
+3Yes!!! The separation causes so many roadblocks in setting visibility, workflow processes, etc. Not all requestors are agents, but ALL of our agents are also requestors for many processes!! I really hope attention is given to this.
Already have an account? Login
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
