I have a question for those of us who have multiple JSS locations set up: what are your best practices for user accounts between locations?
We're expanding our JSS to encompass systems in several cities. Not all of these locations have round-the-clock engineering support, so we will have access across the board. I envision the local engineers (clients to the main JSS database here) to have admin access to their own servers, but I want to restrict server admin access (not JSS access) to their local machine only.
casperadmin & casperinstall accounts do the actual work between realms, so I don't think that keeping the remote admin accounts localized will impact any operations. Does doing this present any issues that I'm not thinking of?