Account security and restrictions

fop

Hi folks,

I think I know the answer to this question already, but because of the way we use Solarwinds I'll ask it anyway.

Our Solarwinds install is used to monitor customer's estates as part of a managed service, as well as our own devices. I'm looking into the possibility of creating a dashboard for a customer so they can have an overview of their own estate.

Creating a read-only user is simple for this, and the Account Limitation feature ensures they can only see their own stuff when they log in.

However, even if I have 'node management' disabled and literally everything else turned off in the account apart from this single dashboard, I've discovered that I have free access to other public dashboards and even Manage Nodes itself just by using the URL for that page. Does anyone know of a way to stop this happening? I'm guessing the answer is 'no'.

Cheers

Adrian

SteveK

I thought removing "Node Management" rights hid the Settings menu, but I don't know of a way to prevent them if they have direct access to the url.

I know in the past we had some teams that wanted to only see the items they were responsible for.  So utilizing the account limitations to a dynamic group based on custom properties worked out well.  The main gotch ya on that, was we had to add a dynamic query for each object type that we were monitoring to reduce their view.  It is a bit of a pain though.  We never really had to go much further than that as the accounts essentially had read only access (no management rights, couldn't use process or service manager to modify anything, etc..), so even if they could see systems outside their scope, it didn't really hurt anything.

I thought when testing, even if they got the URL to a different dashboard, their access was still limited to the scope of the account.  That was awhile ago and before modern dashboards, so not 100% how that has effected things.