SCSM Add Implied Permission to Class

Question

question

ysobhdel asked May 1, '22 ysobhdel commented May 7, '22

SCSM Add Implied Permission to Class

I have dervied a new class from System.WorkItem called TaskClass. I need to provide the permission to everybody (EndUsers - NT Authenticated Users) to be able to create or update tasks.
We do not require any queue mechanism, we just need to have implied permission (just like Affected User implied permission).
I may enforce the access control in another layer.
How can I do that in Powershell or SCSM SDK?
I have asked similar question here but I am doubtfull about parameters.
Meanwhile I have read this, this and this articles but didn't manage to find my answer nor the MP bundle mentioned in the first post of @AntonGritsenko-8172
Thanks

msc-service-manager

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-05-02T12:05:49.003Z

AntonGritsenko-8172 answered May 2, '22 ysobhdel commented May 7, '22

First or all, let's deal with terms:
the Implied permissions are managed using the relationships, and that can't be change.
the Implicit permissions are managed against classes, relationships and properties and can be adjusted using SDK

Now back to your question. Because your class delivered from the WorkItem, the implied permissions will work out of box. You can refer the list of such permissions here: https://docs.microsoft.com/en-us/system-center/scsm/user-role-profiles?view=sc-sm-2022#implied-permissions
The Affected User relationship is in the list, so it should work.

If you want to provide access to other users, then you can use Implied permissions. Profile Editor mentioned in my blog post now published under Operaio brand, you can download it here: [Operaio - Free Software][https://support.operaio.ch/EndUser/Items/View/7bf13e1e-994b-63a9-fd14-c42a8f1984cf/b02f1837-6326-6756-ccbe-2c65bc94b974/f43f7cc5-8319-0859-4262-e0f3a1a3a78f]

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ysobhdel · May 07 at 04:27 AM

Thanks a lot. So we can't force implied permission of Assigned To User to the new class?

0 ·

question