Is there a way to add one group to another group's Targets?

Products

• Client Management Suite
• IT Management Suite

Issue/Introduction

We have a support group that does some low level Altiris support and has access to the console. They have access to all the Org Groups, but they can’t access targets that the other Support Group have created. Now I know that you have to be in all the security groups that created the targets in order to manage them, but I was wondering if there is a setting I can use to give them access to all the targets that the original group has created and owns?

Resolution

Run the SQL Queries below to find the GUIDs of the Target Source Role (Created the Targets) and the Destination Role (Role you're adding):

--Get source role guid
select guid, Name from vRM_Trustee_Item
where name like '%NAME OF SOURCE ROLE%'

--Validate that the targets are what is expected
select i.Name, r.*
from ResourceTargetOwnerTrustees r
join Item i on i.Guid = r.ResourceTargetGuid
where r.TrusteeGuid = '83D5FBA1-4384-4D02-86F2-3FA9A6B90D9E'    --Guid from first query / source GUID

-- Find Role GUID for role to add  / Destination GUID
select guid, Name from vRM_Trustee_Item
where name like '%NAME OF DESTINATION ROLE%'

--Insert the new role with all existing targets
insert into ResourceTargetOwnerTrustees
select r.ResourceTargetGuid, '9C4041C1-C1E9-4E8B-B10A-028B1CC630EB'--Guid of the role we want to add  / Destination GUID
from ResourceTargetOwnerTrustees r
join Item i on i.Guid = r.ResourceTargetGuid
left join ResourceTargetOwnerTrustees rt on rt.ResourceTargetGuid = r.ResourceTargetGuid
    and rt.TrusteeGuid = '9C4041C1-C1E9-4E8B-B10A-028B1CC630EB'     --Guid of the role we want to add  / Destination GUID
where r.TrusteeGuid = '83D5FBA1-4384-4D02-86F2-3FA9A6B90D9E'        --Guid from first query / source GUID
and rt.TrusteeGuid is null