New Helpdesk role

[Kristian]

Hi,

 

We are missing out on a feature, for our Helpdesk, that will allow them to support the business needs - while also ensure data safety.

 

We would like the Helpdesk people to do the following:

1. Add new password lists (but not view them)

2. Assign an AD group to them, and prevent them from changing it afterwards.

 

Since all our password lists have unique AD groups attached, and they cant add them self to the group, with an alert is raised - its not an issue that they can assign the AD group to the password list... Because it would be noticed instantly.

And they cant add other type of AD groups where they are member of (fx VMWare viewers, Print administrators, etc) - because that would also trigger an alert, since it dosent comply with our naming standards.