Andrew Yager

I've just discovered that there is a lack of distinction between organisation and group permissions. Enabling agent permissions to manage an organisation (which we would like to do) also enables their ability to modify the groups that they, or any other user is a member of - potentially opening a huge privacy issue/window.

I'm actually gobsmacked that there isn't a difference in the way that Zendesk manages these two types of permissions!