Account Limitations with multiple object types?

robert777

Greetings All.

Beginning to work a new requirement to build account limitations into Solarwinds.

Account limitations are brand new to me. 

As I understand it account limitations seem to allow access based on a single criteria - one report, one group of application names, etc.

Not sure how to build an account limitation to give, for example, one user group access to a group of nodes + a report category + an ip address pattern (additive).

Can someone provide direction on how to build an account limitation that includes multiple object types (or reference to a good article on the subject)?

Thanks!

mesverrum

If you need to span multiple object types you are best set by using groups, since they already allow you to contain the majority of the categories.  You should be able to use the group logic to come up with basically any additive logic for types of monitored objects.

Alert and Report limitations are actually their own bucket, and this is pretty simplistic by comparison. There is a field on each of those when you are managing them called <something limitation> and its basically a drop down where you tag an alert or a report with a single limitation value that you then map to specific users/groups in the manage users page. It's not really as dynamic and flexible as the object limitations for nodes and such, but it mostly gets the job done and the contents of those reports should be restricted to only show the nodes/etc that the user account would be able to see.  Although a user told me recently that scheduled pdf reports were ignoring their account object limitations, worked as expected when logged into the console, so scheduled reports maybe are sidestepping the object limits which would be annoying to work around.