1

How do I add other Spiceworks admin users, pulling from Active Directory?

For example we have an AD group “local-district-admin” and I would like to enable all of the people in that group to view the machine inventory collected by Spiceworks. I can’t figure out how to do that.

When I go to “Settings > User Accounts” the only option I see is to add completely new users, manually specifying their name, email & password (which I, of course, don’t know). I don’t want to create new accounts, just use our existing AD accounts.

I’m using Spiceworks 7.x (upgraded from v6.x an hour ago)

2 Spice ups
2

…think I found the answer “At this time you cannot use AD authentication for the admin login.”, at the very bottom of http://community.spiceworks.com/help/Active_Directory. :frowning:

So this changes my question to, “Can I let a specified AD Group view the inventory?”

3

Just to clarify – it is possible to import users from a specific AD OU into the People view, then manually turn them into Admin-level accounts and manually set passwords. See here for details on the first part of this: http://community.spiceworks.com/help/Advanced_AD_Authentication

As for your second question, there are 4 admin-level accounts in Spiceworks. Taken from http://community.spiceworks.com/help/Managing_Users:

  • Admin: Anyone with admin access has full access to Spiceworks. They can run any report, change any setting, delete any device, etc. Only give admin access to people that you trust not to mess anything up. This would generally be given to other IT administrators in your company. If you want these users to be notified via email, you need to set up email alerts for them.
  • Reporting: Someone with reporting access only has the ability to run the reports that you have marked as “public”. For example, the office administrator is responsible for making sure that the printer’s don’t run out of toner. You can set up a report to generate the ink levels for the printers and make it a public report. Then you could create a new user with reporting access for the administrator so he/she could monitor the toner levels on their own. Make sure to make the reports public if you want them run by users with reporting access.
  • Helpdesk Admin: You can make someone a Helpdesk Admin to give them full access to the help desk, while preventing them from accessing Settings, Inventory, etc.
  • Helpdesk Tech: The Helpdesk Tech role is for those who you only want to have access to tickets that have been assigned to them. They won’t be able to view the unassigned tickets; only their own.

Only full admin accounts have access to the Inventory, but they also have access to everything else. You will simply need to select the access level appropriate to your needs, and assign that to your admin users. At the moment, there is no way to grant any access other than the ones detailed above.

2 Spice ups
4

Good answer.

But how it be “there is no way to grant any access other than the ones detailed above.”. It must be the way…maybe manual edit SQL base or something else. There must be the way. I think this is not very hard thing for execution…I think…

5

thank you @Gabrielle. It’s good to know with confidence that “you can’t get there from here”. Now I can stop trying and move on to stuff I can do something about. :slight_smile:

1 Spice up