In this article, you will learn:
- Why SCIM-created users receive a default permission in Sherpany.
- How this impacts Guests and Minutes Viewers
- How to manage Guests and Minutes Viewers with SCIM
What happens by default?
When User Provisioning with SCIM is implemented, users are created in Sherpany through the customer's identity management system, for example Entra ID. By default, newly provisioned users are created with the permission "User (with restricted permissions)."
Information
A SCIM-created user with "User (with restricted permissions)" cannot be downgraded later to "Guest" or "Minutes Viewer".
How does this impact Guests and Minutes Viewers?
If a room should contain Guests or Minutes Viewers, creating them first as "User (with restricted permissions)" can lead to the wrong permission level. Because this permission cannot be downgraded, the room-level SCIM setup should be checked before new users are provisioned.
How to manage Guests and Minutes Viewers with SCIM?
We do have the possibility to change the default permission that a user gets when created via SCIM. We can change it to Guests or Minutes Viewers.
To properly set up the permissions, we recommend the following:
- if the room has Guests, the default should be "Guest";
- if it has Minutes Viewers, the default should be "Minutes Viewer".
When the default permission has been changed, new SCIM users are created in that room with the selected permission. After the users are created in Sherpany, the User Manager reviews their permissions and upgrades them manually in Sherpany if needed.
To change the room-level default permission for SCIM, please contact Sherpany Support.