IT Management Suite

 View Only
  • 1.  Organizational Groups and Permissions

    Posted Jun 08, 2015 06:10 PM

    Hello all,

     

    I have an SMP which is used by multiple teams in different physical locations.  I have configured permissions on the NS console to prevent folks from one location to manage computers from another location (to keep the console clean for these folks and to prevent mishaps) by assigning these permissions to Organizational Groups (which are imported from AD).  So a tech A from location A can see computers in the Organizational Group A only, and cannot manage Computers in Group B.

     

    This works well, except when it is a new computer.  If a computer is entered via 'Predefined Computers', or if it imaged via Initial Deployment (where I prompt for the computer name), then there is no way to assign the computer to the correct Organizational Group, or to any group ... I have to wait until the AD Import takes place on a schedule.

     

    So my questions is .... is there a way add logic to my imaging job to add the computer I have just imaged to an Organizational Group of my choice?  There is a task to do something like this but it expects input from the person launching the task, so I am unable to use a Token.  I cannot use this task.  I've seen that I can also create an Automation Task, but then I cannot add the specific computer I am imaging nor can I include the Automation task into my imaging job.

     

    Has anyone ever needed to do something similar?  I am a noob with Workflow, has anyone created a Workflow that might accomplish this?

     

    Thanks

     

    Alex

     

     



  • 2.  RE: Organizational Groups and Permissions

    Posted Jun 30, 2015 11:11 AM

    Hi Alex,

    We use Automation Policies in order to put new machines in Organizational Groups. In order to achieve create a new automation policy:

    1- In Data Source you need to write a query that will determine which machine(s) will be put into the OG. It can be simple just like SELECT [GUID] FROM VCOMPUTER WHERE [IP ADDRESS] LIKE '10.10.10.%'.

    2- In Actions configure a task named "Assign to Organizational Group" to put the new record(s) into the OG.

    3- Configure a schedule.

    Everytime this policy runs, it will put machines under 10.10.10.% ip address into the selected OG.

    Of course, the conditions in the query can be improved, but that is a simple scenario I am able to show you. Please let me know if you need any further help.

    Regards.



  • 3.  RE: Organizational Groups and Permissions

    Broadcom Partner
    Posted Jul 01, 2015 08:02 AM

    Hi Alex,

    Using Rafaels method to move Computers in a specific Org Group is a vaild method. There is another one which i want to share with you and the Connect Community.

    The Solution we are using is similar to the Solution provided by Rafael but differs in some steps...

    SMP Console -> Manage -> Automation Policy -> System Messages

    Automation_Policy.png

    Select Resource Created as NS Message...

    click on Edit Query...

    Predefined_Computer_Query.png

    Proceed with Step 2 from Rafels post...

    When using this method there is no need to wait for the Schedule -  because this policy gets immediately kicked-off when a new Resource is created...

    Network23



  • 4.  RE: Organizational Groups and Permissions

    Posted Jul 01, 2015 08:27 AM

    That's even better. Great! I will also keep it under my sleeve. Thanks.