Description:
I have a single ZCM deployment for 60 sites. Each site has administrative accounts, sometimes with multiple accounts that are allowed the same rights to specific sites. Because of this, I have created groups in eDirectory for each site with a uniform name (zenadminXXXX where XXXX=site cost center).

I recently needed to make several distinct changes to the rights at all 60 sites. Each change was identical, but applies only to the folders (bundles, policies, etc.) for that specific site. My plan was to generate a zac batch script that would do this work for me since my objects are set up to be programmatically coherent (distinguished by cost center number) and I have saved a lot of time in the past through similar techniques.

Unfortunately, I discovered that I could not carry out my plan because the administrative rights operations allowed by the zcc command line apply only to administrative user objects and not to administrative groups. Consequently, I will be spending a lot of time in the GUI making these changes.

Proposed Solution:
Extend the command line operations that can be done in zcc involving administrative users and their rights to administrative groups as well.

Value Proposition:
Better scriptability, better system abstraction by using groups instead of individual users for administration.

by: Johnnie O. | over a year ago | ZENworks Control Center