Open Discussion

Expand all | Collapse all

Are you using the All Org roles?

  • 1.  Are you using the All Org roles?

    Posted 08-02-2018 16:26

    Hi everyone,

    I'm Mark Hubbard, Senior Product Manager at Code42. I'm looking for some info from customers with on-premises authorities to help with the details of one of my current projects.

    I'd like to know:
    1. do you use the All Org Admin/Manager?  What about All Org Helpdesk?

    (these roles use the allorg permission, allowing them to see the entire user hierarchy without being limited to seeing those users only in their org or below)

    2.
    If so, why do you assign a user All Org Admin / Manager or All Org Helpdesk?   What does that accomplish for your organization?

    If there are any other details you think are relevant, please feel free to share those as well.

    Thanks in advance for your help!



    ------------------------------
    Mark Hubbard
    Sr. Product Manager
    Code42
    ------------------------------


  • 2.  RE: Are you using the All Org roles?

    Posted 08-13-2018 16:51
    Hi all,
    Just checking back in. It's summer and I know a lot of people are in and out of the office on vacations, so I'm bumping this topic in case you missed it in your email notifications.

    I'm still looking for information on how you're using the All Org Admin / Manager or All Org Helpdesk roles. Even if you're not using these roles, please chime in because it'd still be helpful know if you're not using these roles.

    Thanks again!

    ------------------------------
    Mark Hubbard
    Sr. Product Manager
    Code42
    ------------------------------



  • 3.  RE: Are you using the All Org roles?

    Posted 08-14-2018 08:13
    Hi Mark -

    We don't use either of the roles, rather we have two custom roles set up to meet our needs. The primary need is for our Help Desk to have read only access to certain information. We didn't want them to be able to kick off restores or change backup settings without consulting anyone on my team, which is why we reserve that right.

    I'm interested to see what other folks may be doing for delegating access to their Help Desks, and if there were any concerns/reservations before granting access.

    ------------------------------
    Scott Preston
    Drexel University
    Philadelphia, PA
    ------------------------------



  • 4.  RE: Are you using the All Org roles?

    Posted 08-15-2018 00:21

    Hi Yes we do use All Org Admin/Manager. On four masters but not the All Org Helpdesk? at least not yet.

    There are several companies and departments using the same Master server and each is dedicated an "Org Admin"
    Only Administrators of the whole solution is using "All Org Admin".



    Nicklas Ulander
    Email: nicklas.ulander@softplanbangkok.com

    SOFTPLAN Bangkok Co.,Ltd.
    Secure Backup and File sharing for SME, Governments and Enterprise 

    496-502 Amarin Plaza, 10th floor, Ploenchit Road, 
    Lumpini, Pathumwan, Bangkok  
    10330  Thailand

    Mobile: +66 (0)910 713 580
    Office: +66 (0)2 305 6800
    Fax: +66 (0)2 256 9900







  • 5.  RE: Are you using the All Org roles?

    Posted 08-16-2018 02:37
    We do use All Org Admin, but there is no All Org Helpdesk at our installation. May be it is since we have been a customer for so long there was no such role when we started using Code42 CrashPlan.

    ------------------------------
    Jorgen Olsson
    CEO, Moreware AB
    Stockholm
    ------------------------------



  • 6.  RE: Are you using the All Org roles?

    Posted 08-14-2018 11:52
    Sorry,
      We are entirely cloud based.

    ------------------------------
    Clifford Goeke
    IT Manager
    Fayetteville AR
    ------------------------------



  • 7.  RE: Are you using the All Org roles?

    Posted 08-15-2018 07:32
    We are not using any of the roles specifically. I don't believe I have ever changed them from the defaults.

    ------------------------------
    Craig Nuckels
    Systems Admin
    Warner Robins GA
    ------------------------------



  • 8.  RE: Are you using the All Org roles?

    Posted 08-14-2018 12:19
    We are 100% cloud!

    ------------------------------
    Paul T. Cottey
    Chief Information Officer
    Chicago IL
    ------------------------------



  • 9.  RE: Are you using the All Org roles?

    Posted 08-14-2018 12:55
    Yes, we are using that role for our System Admins and for our Help Desk Manager, as they need to access more than one group.

    We also have one person who is in charge of two different Orgs, ones that couldn't be nested.  She has the All Org role because of this - it would be better if we could have her as the Org Admin for two different Orgs but oh well!

    ------------------------------
    Diana Williams
    Senior Systems Admin
    Athens GA
    ------------------------------



  • 10.  RE: Are you using the All Org roles?

    Posted 08-14-2018 18:02
    Hi Mark,

    We have a pretty small crew, so yes, we use the all org admin role.  Frankly, we haven't changed much of our crashplan settings in over the last year, so if any of us needed to get into the admin console, it would probably hold us back to have to figure out what permissions we needed.

    Leon

    ------------------------------
    Leon Perrin
    Cloud Engineer
    Portland ME
    ------------------------------



  • 11.  RE: Are you using the All Org roles?

    Posted 08-15-2018 08:49
    We do not, but what we do have a need for is a multi-org sort of role.  For example, College of Engineering has their own IT folks we'd like to give some rights to as well as send them weekly reports on their orgs.  But, using ldap sync with org determination within, there are several orgs for engineering: Mechanical, Electrical, Chemical, Aerospace, etc..

    For the moment our workaround is to manually create an "umbrella" org in code42, move all these auto-created orgs under it and assign the IT folks privs. in the umbrella org.

    Would be great if I could edit an org and say "this custom group of users" gets reporting and limited admin rights.

    Thanks for asking,
    William

    ------------------------------
    William Eubank
    Admin
    Huntsville AL
    ------------------------------



  • 12.  RE: Are you using the All Org roles?

    Posted 08-15-2018 09:06

    Good day Mark,
    We are not using either of those roles. We are entirely in the cloud.

    Thanks,
    Douglas



    ------------------------------
    Douglas Manness
    IT
    Winnipeg MB
    ------------------------------



  • 13.  RE: Are you using the All Org roles?

    Posted 08-14-2018 11:34
    Mark,

    We grant our service desk the All Org Admin role to that they can create and move accounts arounds orgs as requests come in.  It allows them to see where users are in the org as we gate access by orgs to local IT folks.  An example would be in the College of Literature, Science, and the Arts having professors across many disciplines and departments called for quick help vs heading to the local IT office.    In a tight pinch, they can do a web restore for users that are traveling and need a file quickly.

    ------------------------------
    Ed Bobak
    Mac Engineering
    Ann Arbor, MI
    ------------------------------



  • 14.  RE: Are you using the All Org roles?

    Posted 08-14-2018 13:32
    We are using the All Org Admin roll for our Sysadmins.  The delegated admins only have their areas to manage but we can step in and help if they have an issue of if they leave the organization.

    ------------------------------
    Joshua Bell
    Systems Administrator/Newtwork Administrator
    Athens GA
    ------------------------------



  • 15.  RE: Are you using the All Org roles?

    Posted 08-14-2018 14:45
    We are on prem and have created a handful of custom roles rather than use the provided ones that range with various permissions. Here are a couple examples:

    • Progress Viewer - Help Center techs who only need ability to see if customers are backing up
    • Push Restore - Higher permissions to be able to initiate a push restore
    • Security Admin - Ability to exclude and delete files that have been flagged as malicious by our AV software


    ------------------------------
    Kendall Johnson
    Desktop Systems Administrator
    San Diego CA
    ------------------------------



  • 16.  RE: Are you using the All Org roles?

    Posted 08-14-2018 14:58
    We are 100% cloud - so no, but ... we would like to have this option!  Apparently, for now, it is something we have to build via the API which remains a cloudy, mysterious entity

    ------------------------------
    Robert Talda
    System Engineer IV
    Cornell University
    Ithaca NY
    ------------------------------



  • 17.  RE: Are you using the All Org roles?

    Posted 08-14-2018 15:39
    ​We use a slightly modified version of the All Org Manager role for our Help Desk. We expanded certain properties beyond read-only and full push restore rights to grant them more troubleshooting capability. Our custom role has taken shape over time and may now be pretty much akin to the All Org Admin role.

    ------------------------------
    Adam Satko
    Sim Tech Lead
    [CompanyName]
    ------------------------------



  • 18.  RE: Are you using the All Org roles?

    Posted 08-15-2018 10:29
    All -

    Thank you very much for your replies - it is very helpful and informative!  I will be following up specifically with follow up with a few of these posts individually.

    @Clifford Goeke, @Paul Cottey, ​​@Douglas Manness - You have noted below that you are in the cloud so you don't use these roles.  These types of "all org" roles enable (among other things) the ability to ​manage / view information / take action (depending on the specific role) for users in orgs that is not the same or a child of the role the user is in. These are not currently available for our fully cloud deployments yet, but we are evaluating and trying to understand interest.  Is that something that is interesting to you?

    Thanks again for your input!

    Mark

    ------------------------------
    Mark Hubbard
    Sr. Product Manager
    Code42
    ------------------------------



  • 19.  RE: Are you using the All Org roles?

    Posted 08-15-2018 10:43

    Mark,

      We do tech support for several other non-profit organizations and have purchased and installed Code42 CrashPlan on their computers.  We currently use the Administrator logon to manage those devices much like the "all org " role.  We would like something similar for the individual orgs.  Something that would allow a user to be an administrator of that org without allowing rights up the chain.  Kind of the reverse of the "all org" 

    From what I'm seeing in the roles tab of the user the "org admin" has the "all org" rights .  Am I missing something?

     

    Cliff Goeke

    IT Manager

    Communities Unlimited

    3 Colt Drive

    Fayetteville, AR 72703

    Office 479-443-2700 ex110

    Cell 479-236-1666

     






  • 20.  RE: Are you using the All Org roles?

    Posted 10-11-2018 20:08
    We use All Org Admin for our API users to avoid giving them SYSADMIN permission. This seems to be the only way to achieve the functions we want - reporting on users, migrating users to different orgs, deactivating and moving users. Perhaps there is a better way we could be doing this?

    ------------------------------
    James Williamson
    Network Engineer
    PEPPERMINT GROVE WA
    ------------------------------



  • 21.  RE: Are you using the All Org roles?

    Posted 08-15-2018 11:51
    we do not use them at all

    now that i am thinking i never used them or know there were more

    ------------------------------
    sergio castaneda
    Abs administrator
    Austin
    ------------------------------



  • 22.  RE: Are you using the All Org roles?

    Posted 08-16-2018 07:15
    We are not using these roles now, we are entirely cloud based now.

    ------------------------------
    Eric Rapp
    Data Center Tech
    Lynchburg VA
    ------------------------------



  • 23.  RE: Are you using the All Org roles?

    Posted 08-17-2018 10:09
    Hi Mark -

    We currently do not have a need for roles, our site is small so there is not much need for it.

    ------------------------------
    Jason Sievert
    Manager, Infrastructure
    Eden Prairie MN
    ------------------------------



  • 24.  RE: Are you using the All Org roles?

    Posted 08-20-2018 03:21
    Yes - we use this level for a couple of our logins for the sys admin team.

    We're still looking at the best setup for our Helpdesk guys

    ------------------------------
    Nick Barron
    Technical Director
    London
    ------------------------------