Read-only admin account

Question

Does anyone know how I can provide full read-only access to a windows group or user for Solarwinds?  I have a Security team that need to see everything in our environment, but I don't want them with the ability to manage/edit nodes, etc.

All I see in editing the group account is the "Yes" or "No" to manage nodes and other aspects, but no "view-only" or similar option to restrict the account.

Lofstrand · Answer

No, not possible.

If you want to grant them access to, for example, see how nodes are configured, they need node management permissions. Then they can edit as well.

Perhaps some reports can show them the information they need without granting them edit permissions.

escaloni · Answer

Thanks for the reply cnorborg - Don't know if something's changed on the 2025.4.3 version I'm on, but when denying admin rights and allowing Node Mgmt looks like I can still edit the nodes/its resources when testing.

I'm using simple AD integration but seem to be locked to the below.  No view-only or other options lower down to set Node mgmt to read only.  If that's a limitation I agree, it's definitely a problem.

cnorborg · Answer

Sure, you can do AD based authentication on groups either via simple AD integration, or by using SAML.

You give permissions to the group, just don't give them "Administrator Rights", one of the dropdowns near the top.   Below that you can give them various permissions for each module, but without "Administrator Rights" they won't be able to edit nodes, or add/edit users.

Unfortunately you can't get more granular than that, like if you wanted them to be able to add/edit nodes but not edit users.   One of the biggest problems with the platform IMHO.   If you give someone the ability to add a node, they can go edit their own permissions and give themselves anything they want.