Delegate Node Administration/Access

I have already opened a ticket with Solarwinds, but I wanted to see if anyone here would have an idea:

Is there a way to delegate access/node administration within Orion? I strictly administer the network devices within my company, and I also manage our Orion NPM server. I have received requests from other IT teams in my company to be able to manage their servers or various devices within Orion as well. Is there a way to grant them access to Orion/NPM, but only give them access to manage/set up alerts/run reports for only their nodes?

Find more posts tagged with

delegate

administration

nodes

Reports

orion

access

solarwinds

npm

administer

ticket

Accepted answers

jacob.decker

Yep. Solarwinds support was quick. I got the following response:

Account limitations may be used to restrict user access to designated network areas or to withhold certain types of information from designated users. The following link outlines the procedure to set user account limitations.

http://www.solarwinds.com/documentation/en/flarehelp/npm/default.htm#orioncoreagsettingaccountlimitations.htm

Or you can check the youtube video link below for utilizing both custom properties and account limitations to achieve your goal:

https://www.youtube.com/watch?v=8sVy_TrrAGc&list=PLSAG2TJPvS5Y1nq9rtjcLeP1sfzpZIi8q&index=4

All comments

borgan

You can do this by adding a limitation to their user account that matches the nodes that you want them to manage. That way, when you give their account Manage Nodes rights, it will be limited to those nodes.

jacob.decker

Yep. Solarwinds support was quick. I got the following response:

cnorborg

I think the answer is that it depends on exactly what you want to do...

Some basic limitations can be done by applying "Account Restrictions" from within the User Manager. From there you can add all sorts of limitations based on different criteria as to what he user can/cannot see. If you give them management rights however, they would still probably be able to manage most things.

Although different modules might have different restrictions also, these would be found under the individual Module permissions down at the bottom of a user profile. From within here for instance, with the IPAM module you can assign them different roles such as "Admin", "Power User" or "Read Only" and such. In NCM you also have Role based restrictions, such as "Adminstrator" and "WebViewer", or even "None".

That being said, it is pretty limited what you can accomplish. You might want to go vote here!!