It would be nice to be able to have "Deny" based permissions so that we can exclude some users from being able to access certain sites. Right now, the only way to do this is to create an inclusive permission set of all the sites less the one(s) you don't want these users to have access to. This can be time consuming when you have over 50 sites and each site has a dozen permssions
There needs to be a better way of locking down different session groups. I want to give my employee's access to all session groups EXCEPT my company. Right now I have to add them to every single session group and leave my company out.
There should be an easier way to set permissions. I should be able to say access to ALL session groups except mine.
Or have the ability to put session groups in other groups. One group called CLIENTS with session groups in it, another called INTERNAL or PRIVATE with session groups in it for a different security level.
To get the one grouping to have the connect with consent, I have to delete the "HostSessionWithoutConsent" from both roles, then add in a "HostSessionWithoutConsent" for each grouping except the one(s) I want with consent
Since I have over 50 groupings(clients) that means for each role (I have two) I have to create 50+ "HostSessionWithoutConsent" for each role.
Then each time new groupings / client, I have to go back add multiple.
We create new session groups all the time. Currently, we then have to edit roles each time to allow staff access to them, because we have one group that only managers access. It would be far easier to be able to exclude one group from a set of users.