I am trying to decide on how to setup permissions for my company. The two options in my head are permissions based on the team (Server team, desktop support, Security, etc...) and permissions based on tool and tool rights.
For Permissions based on Teams I see myself having the following:
For Tools/Tool rights I see there being more sets but easier to give specific permissions to a group/person:
etc....
How are you managing your permissions? Would you change it? Which method would you choose or a different method not mentioned?
Permission sets in our environment are done similar to how you listed.
Then we use ADGroups to provision access to the above ePO groups, makes it a lot easier to manage.
Dear Travis,
I would recommend you to use the AD Groups for the ePO groups which would be easy for management. In addition, you may refer the document.
Cheers!!!
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA