Operational Question: Security

Situation:
-lots of sub-domains in a multisite install (just under 200).
-a form creates a data request for a specific and site.
-other sites must be kept from seeing other sites’ entries.

Desire:
-requests are converted (manually, automatically) into help desk tickets.
-only those with access to specific site can view their site’s entries.
-all other non-site-specific tickets are open to all.

So this is a different level than public vs. private notes in a ticket. I can’t even have unauthorized users see the subject, or have others’ tickets come up in a search.

Ideally, a ticket system that understood & utilized user/ticket ‘groups’ access/visibility, and a complete implementation of privacy (browse, select, search, etc.) is needed.

I can tag/flag an incoming ticket at the time of creation with, say, a number. My users already have that number associated with their account, so the match shouldn’t be difficult.

Deep Down:
-I am using GSuite (GS) for all user authentication and authorization.
-I frequently query GS when a user enters certain pages, get their permissions/assignments, and then draw their page in WP based on what the status is of Custom Fields in GS. It really works out great, and my user admin is all from one place.

Is it possible a WP Helpdesk plugin exists already with this kind of enterprise capability? Or do I have to team with someone and write it into their plugin?

Thanks!

pat
??