topic Still trouble with Credential Distribution Groups in Aerohive Migrated Content

Still trouble with Credential Distribution Groups

pagella — Thu, 29 Nov 2018 16:58:28 GMT

I have Credential Distribution Groups with one Guest Management User.

A guest register himself and i have only these Options afaik.

CWP -> Email approval selected

The guest register himself

-> the visited user gets an email and can approve the guest. Untill then the guest cant surf.

CWP -> Email approval not selected

The guest register himself

-> visited user gets his password right away and can acces immediately.

In both cases the guest management user doesnt see the registered users when logged into the Management GUI ( and also cant deactivate them) He is only able to see users he manually added. Is this supposed to be like this?

Isnt there a scenario where:

Guest register himself

-> Guest Management user gets an Email to approve the registered guest. And also see them in the gui so he is able to disable or remove them.

or atleast

-> when the Email approval is selected in the CWP a possibility to limit the users who can approve the guest.

We dont want every employee to be able to approve guests but we also dont want that only people with admin rights are able to manage the guests account properly.

Re: Still trouble with Credential Distribution Groups

samantha_lynn — Thu, 29 Nov 2018 23:19:12 GMT

It is expected that guest managers will only be able to see users they have created. You can set the same person to be the guest manager and the employee approval person if you'd like (many people do), but they still wouldn't be able to see users that they did not create. If you'd like I can submit a feature request for you to have this functionality added in?

Re: Still trouble with Credential Distribution Groups

pagella — Fri, 30 Nov 2018 00:20:18 GMT

If i turn the employee approval on, the field „person you are visiting“ is on by default. And the E-Mail address i Write there is the one getting the Mail to approve the guest. As a restriction i can only add the Domain. How can i make the guest manager to be the one recieving the approval Mail?

and yes please submit that for me thanks

Re: Still trouble with Credential Distribution Groups

pagella — Fri, 30 Nov 2018 00:22:09 GMT

and yes please submit that for me thanks

Re: Still trouble with Credential Distribution Groups

samantha_lynn — Fri, 30 Nov 2018 00:30:08 GMT

I've submitted that feature request for you to allow Guest Managers to see users they didn't create themselves but are in the user groups they have access to.

Unfortunately we aren't able to get more granular than domain for the email approval process. I can submit a feature request to have more specific settings there as well if you'd like.

Re: Still trouble with Credential Distribution Groups

pagella — Fri, 30 Nov 2018 18:28:25 GMT

Yes please request that too. Can you Tell me how long such a request takes to be realized(if at all) We plan to roll out in April. This is such a Basic function that im sure ill have to explain to management why it is not be configured like that. It would be nice to have some changes till then.

Thanks

Re: Still trouble with Credential Distribution Groups

samantha_lynn — Fri, 30 Nov 2018 21:29:14 GMT

Thank you for getting back to me. I have submitted the second feature request for you just now. Unfortunately I have no visibility in to how long it will take engineering to build this in to a future release, but I would urge to you feel free to reach out to me at communityhelp@aerohive.com for updates, and I'll follow up for you on our side.

Re: Still trouble with Credential Distribution Groups

pagella — Mon, 03 Dec 2018 23:27:25 GMT

For now i solved it by forcing the field to be uneditable, already filled with one email address and beeing hidden via HTML

Re: Still trouble with Credential Distribution Groups

pagella — Wed, 13 Feb 2019 15:46:35 GMT

@Sam Pirok is there any Update about the Guest Management? I checked in the release logs but couldnt find anything

Re: Still trouble with Credential Distribution Groups

samantha_lynn — Wed, 13 Feb 2019 21:14:46 GMT

Unfortunately we have not updated the feature in the GUI. There is a possible work around to force the employee approval requests to go to one person, but based on your second to last comment, I think you've found this already:

To change the sponsor email workflow (request goes to helpdesk alias email instead of guest user entering a sponsor email address) simply edit the following in the index.html file

class="text-input VISITING"

name="visiting"

maxlength=128

type="hidden" (changed this value to hidden)

value="helpdesk@example.com " required (entered in their alias email address they want the guest approval request to go to)

Important note is the “Email approval” has to be enabled in HiveManager and the domain added has to match the email address entered into the index.html (example.com)

Re: Still trouble with Credential Distribution Groups

pagella — Mon, 18 Feb 2019 15:53:38 GMT

The main Problem I still have with this solution is that the Guest Manager is not able to see the people who will register themselves like this.

I have two Options:

1) Giving the Guest Manager more rights -> not going to happen

2) Managing the Guests by our self -> those are going to be a lot of calls

We are not really happy with it 