teamviewer/ad-connector

A PowerShell integration script to synchronize users of Active Directory groups to a TeamViewer company via REST based API.

ad-connector's Issues

Map TeamViewer-roles to spec. AD-Groups?

Hello,

Wondering if a future implementation will support mapping TeamViewer-roles such as:
Member, Admin, Company Admin
to specific AD-groups?

Today it syncs all users in the specified AD-groups as TeamViewer "members".

Best Regards

[Bug] Failed to create TeamViewer user xxxxxxxx: @{error=invalid_request; error_description=Parameter "name" must have between 5 and 50 characters.

Summary
The 'Parameter "name" must have between 5 and 50 characters. ' is a problem. We do have quite a number of users with last name of four or even only three letters. I assume this error is because of the last name. I see no way how I could influence this (except changing their name ...).
It could also be the login name or "user id" which in our AD is set to the last name of the user.
This is not clear from the error message.

Expected Behavior
Accept also user names with only three or four letters.

Steps To Reproduce

1. have users in your AD with shorter name
2. run sync job
3. see error in log

Attachments
Failed to create TeamViewer user [email protected]: @{error=invalid_request; error_description=Parameter "name" must have between 5 and 50 characters.

Permission synchronization and new button "Add Device Groups

Hello,

my inquiry would be:
In the synchronization area another field with a filter for the added AD groups permissions.
In the 3rd tab another checkbox with the name "Add devices group".

Background thoughts on this:
Active Directory

One has an OU as an example :
CN=ACL_APK_TeamViewer_IT,OU=TeamViewer,OU=Applications,OU=Groups,DC=your,DC=domain
in this OU you have groups for example ACL_APK_TeamViewer_IT in which the users are directly in or are members via a nested group and fetch them. (Already existing)

In the TeamViewer OU another OU, example:
CN=ACL_APK_TeamViewer_Permission_IT,OU=01_Permission,OU=TeamViewer,OU=Applications,OU=Groups,DC=your,DC=domain

Here the groups for role management synchronized and permissions are defined.
Group in 01_Permission example:
ACL_APK_TeamViewer_Permission_Standard-User
ACL_APK_TeamViewer_Permission_Admin
Thus, this role / permissions created is assigned to

If then the group ACL_APK_TeamViewer_IT is a member of the group ACL_APK_TeamViewer_Permission_Admin, he has the permissions and therefore the access to a device group that was set.

TeamViewer / AD-Connector
If the checkbox is active it should get the members of these (example ACL_APK_TeamViewer_IT) groups, create device groups, name them with the attribute "cn" and add the users or user groups that are in the AD groups.

Or is there another way to automate this further.

Thank you in advance.