A user is a member of several AD groups and his primary user group only has read access. Is there a way to change his primary group so he can have read/write access?
Article Comments
Hi Craig,
What exactly are you referring to?
Kind regards,
Stephan Linke, Tech Support Team
Feb, 2018 - Permalink
Similar question (although this is about 'Read' vs 'None', not 'Read' vs 'Read/Write'):
User is member of multiple groups in PRTG (via connected AD groups).
On specific sensors:
One group has Read rights, the other group has None rights (chosen for giving groups None rights, to keep their PRTG view clean; them not seeing sensors they're not responsible for).
Resulting permission on this sensor for this user: None
Within PRTG, is 'None' overwriting 'Read'?
Because it doesn't look like PRTG is using 'least restrictive'...
Mar, 2018 - Permalink
Hi Corné,
I'm not sure I'm following here. What you have interconnected in AD is one thing, inside PRTG an AD user cannot be member of several groups, only one AD connected group. The access rights configured for that group the user has been "linked" to upon first successful AD login, determines the user's access rights as configured in the tree for each object.
Or maybe I'm misunderstanding something here, please let me know, I can never rule that fully out :)
Kind regards,
Erhard
Mar, 2018 - Permalink
The primary group is basically just the group that comes first in the alphabetical order of the groups. Read/Write permissions always outweigh read permissions. That said, if the user is within a group that has r/o permissions for an object, but is member of a group with r/w permissions for an object, he should be able to modify that. Can you check that out? :)
Jan, 2017 - Permalink