Privilege Set and Individual Privilege

Backlog

Privilege Set and Individual Privilege

avatar

Hi!

I have a situation here at my company that all JIT accounts must always have a default set of privileges and a special individual one, which will determine which customer of ours they will access (we have a bunch of specific configurations that depends on which customer he will support).
However, when I'll set the privileges when granting checkout, as you can see bellow, only the permission sets are available to select, but the other ones aren't (CCA, FOR or MAT)...



Can you please tell me if there is some configuration I'm missing to make them both available (the privilege set and the individual provider privileges) to be selected? If there's not, I believe it would be a great feature...

PS.: While I was writing here for you guys, I did another test creating another Privilege Set using one of the others provider privilege we have and now it's available... That means that when you enable privilege set, only them will be available, right?I believe it's too much work, since we have more than 85 different customers and we already have to pinpoint each group in provider... :P




Thank you!

Regards,
Elaine Berenguer

146ae3d4-c71a-40e4-8100-c479f9cd0523.png

69edd20a-57ea-4431-a7df-66c86d9f1544.png

ae8c6e88-ffcd-45c2-b157-f7da4693528e.png

3198b885-b244-4da7-9230-94a7c3dc27ed.png

All Comments (2)

avatar

Hi @elaineberenguer,

Privilege sets are not only for convenience but are also a way to gate which privileges an end user can access depending on the privileged account being used. However I don't see a problem with giving admins the option to disable this protection if they desire. I've created an internal ticket to look into this and linked it to this thread.

Cheers,

Luc Fauvel

avatar

Oh... I got it!
In our case scenario the checkout will never be triggered by the contractors (they technically could do it, but we will not approve it). We have to give them access only after receiving the formal authorization from our customer and after finishing setting up his session.
Anyways... just explaining why we need this...
Thank you very much, Luc!