Currently to restrict an environment so a user can only see certain devices you have two options. The first option is to add an account restriction. An account restriction prevents the user from seeing nodes based on whatever criteria has been specified. The problem with the current functionality is when you view a chart listing of the top 10 of something, if the user is restricted from viewing the top 10 devices, they won't see any data. The second option is to create a custom view with a filtered view. In this case the a view will display the top 10 items after the filter is applied which results in 10 items always being displayed. Unfortunately you must have the "Allow Account to Customize Views" to open the customized filtered view. This will allow the account to change views and potentially add items they should be restricted from seeing. For example, in our environment we manage multiple customers. We would like to allow some customers to access a restricted view of SolarWinds so they can see performance data on their own servers. If the user account has access to customize the view, they can add components such as reports. In our case, even seeing a list of available reports is not acceptable since they may have other custom names in the titles.
Therefore, I believe there should be a permission added to "Allow Account Access to Customized Views" without the ability to actually customize the view themselves.
Thank you,
Mike