Question regarding AD groups

Student208866

Hey, for a school project I have a task which is as follows:

"Make sure that users from a certain AD group have limited permissions in osTicket"

So lets yes, you have the group "OST-Users". They should only be able to create tickets. Is this doable via groups? Like, I select a certain group and then the permissions are being controlled via that option?

KevinTheJedi

Student208866

Depends on what you mean by "users". Do you mean actual Users or do you mean Agents?

Cheers.

Student208866

KevinTheJedi I mean actual users

KevinTheJedi

Student208866

Well that doesn't make much sense then as Users only have permissions to login (if they have an active, registered account), view their ticket history (and some org tickets if configured), create new tickets, and update their existing tickets.

I truly think they mean Agents UNLESS they mean ONLY those users in that specific group can interact with osTicket. If this is the case then put the Users into their own OU in AD and then configure the OU in the Search Base setting in the plugin config.

Cheers.

Student208866

KevinTheJedi My initial post was indeed vague, agree with you. I will just copy and paste what the teacher wrote in our assignment:

In the Active Directory on the server, create a group named: "OST Handlers" and add 5 employees to it.
In the Active Directory on the server, create a group named: "OST-Users" and add 5 employees to it as well.
Ensure that users of the group OST-Users are allowed to create tickets but are not allowed to pick up tickets.
Ensure that users of the OST Handlers group are allowed to grab tickets, handle them and escalate them.

KevinTheJedi

Student208866

They just mean make ost-users only Users and ost-handlers as Agents.

Cheers.

Student208866

KevinTheJedi Okay that makes sense. Thank you very much for your responses!