ITSM Permission groups for CIs

[schaffel]

Is it possible to restrict a CI to a defined usergroup?

We want to create a CMDB that should be used by different teams. Team A should see all servers that are required for their work, and team B should see other servers.
How do i set these permissions in a CI class?
We use OTRS 3.1.x but will upgrade to 3.3.x in near future.

[BIG_jan]

It is posssible with some programming.

We build access-groups for each customer_company in the cmdb, so only the CIs of allowed customer_companies can be seen.
Only thing that has du be:
- every CI has to have a customer_company defined

All this is written in 'Kernel::System::ITSMConfigItem::Permission::ItemClassGroupCheck'

(this can be disabled by sysconfig, if not working, or test)

[jojo]

just create different classes and assign the permission to the CI class.

[schaffel]

Where can I define the customer_company in the CI?
Do I have to change something in the class definitions, like adding a corresponding field?

In the SysConfig I found the two options ITSMConfigItem::Permission::Class###010-ClassGroupCheck and ITSMConfigItem::Permission::Item###010-ItemClassGroupCheck in the section "ITSM Configuration Management -> Core::ITSMConfigItem"
They are both activated by default, but the required flag is set to 0.

Is there some sort of a tutorial or howto in the web?