RBAC - Manage Assignments

Problem:

Trying to allow our Service Desk / Help Desk to have some control on Session Hosts assignments during our onboarding phase, without to much elevated access.

Vision: 

To be able to choose the option that states, Workspace (Manage Assignments) within the role definitions and it to function as it reads.


Currently I have a role setup with only Workspace (Manage Assignments, Manage Sessions, Manager Power State, Manage Drain Mode) This setting does NOT allow the defined users to manage the assignments for our personal pools.

We have to add the Manage Hosts definition in order to manage the assignments. However, in doing this it elevates a lot more permissions that I cannot have any tier of our service to have, IE "Delete" the session host. 

26

Comments (1 comment)

0
Avatar
Chad Manzer

Thanks for sharing. I’ve captured it for investigation, and it looks like there may be a bug or conflict in how multiple permissions within the custom role are interacting. I’ll also work on reproducing it as well.

thanks

Please sign in to leave a comment.