Closed

Closed due to inactivity. Received 2 votes with last vote on 12 Oct 2017.

Limit Alert viewing to account nodes/interfaces

We allow customers access to SW to view their nodes, networks and/or NetFlow data based on their services. The issue is that the restrictions to the node or group of nodes for the account does not block the customer view all alerts within the SW instance. This provides them not only information about our network but also other customers. We opened ticket and were informed that there is no current way of getting around this challenge except for blocking alerts from these customers.

Excerpt fro the ticket: "...you are correct the single or group node list limitation does not apply to alerts. Alerts limitation is independent of the single or group node list limitations.


However, currently, you cannot apply both limitations to the accounts."

This will require us to modify our customer offerings/visibility"

  • We have two views established for customer access, each customer logins in through our portal and we manage the login so 1. they don't have to know their login info 2. they can have multiple users accessing only one account.

    There are currently about 1000 unique companies/customers accessing between 1 - 30 nodes each. We are still on 11.5 when we upgrade there maybe greater flexibility for this, but otherwise it appears i would have to have permissions set up for each company or remove Alerts from both views. I was hoping that Alerts would rely on the account and assigned node or group of nodes.

  • Possibly depending on how you set up logins.  We use domain accounts and assign permissions based upon groups.  So, each group gets their own category.

  • Thanks

    This is an effective approach; however, with nearly 3,000 unique customers [and growing] wouldn't this path require a unique alert built for each account? Hence, hamstring us to maintain these alerts in a dynamic environment [plus/minus accounts]. Or did I miss the boat?

  • If I'm understanding the ask correctly....

    The way I do this is I create alerts for each group and assign it an alert limitation category.  I've verified that works as expected because I created an All Alerts widget on a dashboard.  The contents of the widget are dependent upon which account I'm logged in with.