Single user should have access to multiple companies

[shubham779]

Server (please complete the following information):

• Snipe-IT Version v4.9.4 build 4437
• OS: [e.g. Ubuntu, CentOS] Ubuntu 16.04 LTS
• Web Server: [e.g. Apache, IIS] Apache
• PHP Version 7.2.33-1

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
There are user who are managing different location(companies). so need to give them access of multiple companies.

Describe the solution you'd like
A clear and concise description of what you want to happen.
It would be great if we can add multiples companies access to a user in his user profile.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

[roratonet]

Maybe using the Permissions section in Group Management, the way that I can create groups of users which have permissions to different locations.

[shubham779]

Maybe instead of using Permissions, it will be easy if we get a tag in user profile, something called as "Companies Access" which have and drop-down list with check box in it so that we can select the companies that need to allow for the user. and the companies access tag can take a data from the companies created. It will become to easy rather than managing the Permissions in Group Management section.

[lcudmore]

+1

Our use case: We have IT desktop support Group that manages computers for multiple departments. Within those departments we have managers that want to run reports on their own assets and see the status of equipment, etc..

I can't see a way to do this unless the IT department manages all the assets and then run reports for the sub departments and hands them off periodically or I write a web report via API
or all the departments have view access to all the IT assets, which isn't the best option.

[hesske]

+1 or however many it takes to get this rectified. We also have some individuals needing to see multiple companies and the only way to give them this is make them a Super User, which gives them way more power than needed. I work with over 200 apps in the school district I am employed at, and this is the first app I've come across that you have to give someone the highest level of permissions just to do very simple tasks. This is an extreme shortcoming

[ShaunNeighbourSwale]

+1 Desperately required here too. We have;

• End users who work in multiple schools, so may require assigned assets under multiple companies.
• IT Support teams who do NOT require Super-Admin level access, but do need elevated access over the school(s) they support.
• A finance department that requires access to all assets for audit purposes, but do NOT require Super-Admin level access.
• External auditors who only require the bare minimum level of access to view all assets.

So we need;

• Global permission groups other than "Super Admin" or ideally permission groups that apply to specific companies and/or locations. So the media tech can update the asset records in the media room, but not all asset records in the entire company.
• The ability to add secondary companies to users. The total user count for any company could just count the primary company assignment, but techs in company "A" could checkout assets to users in company "B" if those users have been flagged as members of both.

Without a complete understanding of the underlying system, it seems to me that roratonet's suggestion from 2020-11-05 would be a great step forward. By decoupling Group Management from the group member's assigned company, and instead having a tickbox list of companies that the permission group applies to, group members could be assigned the specified permissions over the specified companies.

[ShaunNeighbourSwale]

Response from Grokability Support;

Full company support is a highly complex feature, and our engineers have not found a way to implement privileges across companies without causing other issues, due to Snipe-IT's relational database, so unfortunately, it is still a limitation of the system. Only super-users will be able to see across companies when full company support is enabled.

I've asked for clarification on what issues this would cause.

[hogemo]

This feature would be very useful, we don't want "basic" admins to become global super users just to access other companies resources...

[nsauter]

Anything new here? We would love to use Snipe-IT in our company but need - at least - read rights on other companies too.

[hogemo]

Hello @snipe, i know you have lots going on, but just wanted to check in on you if this might be possible in a future release, or if it's not likely? (super prioritized feature in our org)

[marcusmoore]

Hi @nsauter, @paegelow, (and everyone else interested)

I'm going to copy/paste a comment I made in #10347 recently:

This is definitely on our radar and there are a couple ideas mentioned in here that we are already considering implementing as , or part of, a solution. Unfortunately I don't know when it will ship. We're pushing towards v7 and if a solution is not included in v7.0.0 then we're planning on shipping something shortly afterwards. Keep in mind that priorities can change but I'm optimistic we'll have something for this fairly soon.

Sorry I don't have a definite timeframe for a solution though 😕