User delegation problems

Hey Thwack,

I'm having some troubles with user delegation. I have searched around and couldn't find any solutions.

Here is the scenario. I am managing over 3000 IPs and want to pass on some of the responsibility to other admin teams. I have the addresses broken down into supernets and subnets. I want to maintain the current layout but want another team to only have access to the subnets they would be responsible for, while all other subnets remain hidden. I am running Orion 2013.2.0 with IPAM 4.0.

Here is the example:

Supernet	Supernet	Subnet
10.0.0.0/8	10.1.0.0/16	10.1.1.0/24
		10.1.2.0/24
	10.2.0.0/16	10.2.1.0/24
		10.2.2.0/24
	10.3.0.0/16	10.3.1.0/24
		10.3.2.0/24
172.16.0.0/12

Hide

Read Only

Power User

Here is the problem. If I make a supernet read only all sub/supernets contained within inherit the read only and can't be changed to hide. If I make a subnet Power user, when that user logs in they do not see the IP's they are Power users for.

Any help would be appreciated.

Thanks,

Happy

Find more posts tagged with

problem

ip_address_management

ipam

user_delegation

user_roles

Accepted answers

All comments

happy.gillmore

Bump.

michal.hrncirik

Hi Happy,

I'm looking at this problem, the scenario you've described should be possible. let me simulate exactly the same you have and I'll ping you back.

thanks,

Michal

happy.gillmore

Great Thanks Michal.

michal.hrncirik

Hi,

sorry for delay - I was out of the office. I've tested your scenario where the config should looks like this:

thwack issue account limitation.png

correct?

but the result looks like this:

thwack issue account limitation 2.png

this is obviously wrong since I set power user role to the two dedicated subnets from above. Our DEV & QA teams will look into this and try to compare to 3.1 where this should really work (so you may found a bug). I'll keep you posted.

thanks,

Michal