Account Limitation to See Nodes

Question

I am looking for a way to limit what groups have access to see a specific set of nodes. I know that I can create a group, put the nodes in the group, and then assign an account limitation and that account can only see those nodes. However, I'm looking for the opposite.

I am setting up monitoring for a bunch of security related appliances. The security team wants to ensure that only they can see those nodes. So, is the only option to put all of the other nodes in a group and assign a limitation to everyone else?

mesverrum · Accepted Answer

Given the extra overhead groups put on your system I would suggest just setting something like a true/false custom property and applying an account filter against the property instead of a group, but otherwise I believe you are on the right trail.