Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

How to grant certain admin permissions on devices but not give full admin rights on Orion server

I would like to have my DBA's add there own monitors and application monitors and SQL queries without having to grant admin access to their Orion account.

I have not been able to figure this out or see where to do this. I can give them admin rights in Orion which then gives them this ability but also gives them the ability to change things everywhere and not just in Application Monitor. Any suggestions or is this something that is already available and I am just not seeing or can this be added in the future?

Find more posts tagged with

Accepted answers

byrona

Currently you have to have the full Orion Admin rights in order to add/change/delete application monitors in APM. I recently suggested in a post that more granular permissions would be a nice feature.

Below is a link to my post where this permission requirement for APM is confirmed by SW as well as my suggestion for more granular permissions.

All comments

mcbridea

Not sure if this will do it but maybe you can create the SQL admin group and place view restrictions that control what they can do.

profzoom1

Have done that on the sql boxes the issue is they still have full Orion admin rights on this and can change views and settings on these boxes I only want them to be able to create and edit Application Perf. monitors on the boxes they can see.

byrona

Below is a link to my post where this permission requirement for APM is confirmed by SW as well as my suggestion for more granular permissions.

profzoom1

Thanks Byrona I just added to your thread.

profzoom1

Not really the answer until it is implemented but I guess if more people request this it will happen faster.

FormerMember

So, to be clear, you'd like to be able to grant access down to specific monitor types? Or do you want to allow non-admins to be able to manage any template?

profzoom1

I would like to grant admin permissions to users either based on the user template or by a group of users to only have admin permissions on the nodes that they can see and only for application monitor.

I think it would benifit everyone who uses Orion APM to be able to allow a group to create their own queries and SQL monitor or web monitors within their group and not be an all or nothing for setting up APM monitors on boxes.

I think alerting would still rest with whomever has admin priv. on the Orion server but I would not have to bug our DBA's for SQL queries or other monitors for webpages and what not on servers that only certain groups care about.

mstolle

How about giving associating a user ID with a custom field(s). eg. Region 1 Server team has access to custom field Region="Region 1" and custom field Admin_Team="Server". Corp. Server team would only have a filter on custom field Admin_Team="Server" so they could administer all servers and server monitors across regions. Regional/Corporate WAN, Regional/Corporate LAN, Business Unit specific... All of these could be handled through the custom fields and conditional filters much as the view limitations. Orion would just have to associate the user ID with the appropriate custom fields. That would give all of us the ability to customize as best fits our individual business needs. Easily tiered and very customizable. Should be pretty easy for you guys to program too.