Limit user access to configs

Question

I have a user account that I want to view config only for specific devices, not all nodes.  Is there a way to limit user access to view config in NCM to specific nodes?  I've been poking around orion and support forms but haven't come up with anything yet.

Thanks!

ck39 · Answer

So it appears limitations are the only way to prevent access to certain devices.  As a workaround, I'm creating two accounts for each of the support staff that I want to have NCM permissions.  One account tied to their domain user that has access to all devices on our NOC page, but with NCM Role "None".  This way they can see all node status, alarms etc.  Then a second local Orion account for the same users but with account limitations set to only specific switches and routers and with NCM Role "WebViewer" so they can view configs.  It's not ideal, but it works.  Most of the time support staff just needs access to the NOC screen but on occasion when they need to deploy new equipment they need access to NCM for configs.  This should work out ok.  Thanks for your help with this.

christopher.t.jones123 · Answer

yea thats the unfortunate thing about the limitations. I haven't found a way to limit access for configs to a set of devices

ck39 · Answer

Thanks for the links.  I tried account limitation and it certainly works, however it blocks all access to devices not selected.  I'm looking to limit access to just the config for some devices.  For example I want our network support staff to view status, interfaces, alerts etc for all nodes but only have access to configs for switches and routers, no security appliances.  Account limits block all access, so now the security appliances don't show up on our NOC page and they can't see the status or any errors.