topic GUI Client User to manage one Cluster or one Policy Package in General Topics

GUI Client User to manage one Cluster or one Policy Package

Chinmaya_Naik — Thu, 27 Aug 2020 18:15:54 GMT

Hello Checkmates,

1. Can we create a GUI Client user who only have permission to manage one cluster instead of multiple cluster?

Because we have Management Server R8.30 who basically manged two R80.30 Cluster but we want to create a user to modify on one cluster members only , also have permission to install security policy in only one policy package instead of both policy package.

Regarding Policy installation I able to see one solution.

Cluster Properties : others : Permission to install

Kindly suggest

Regards

@Chinmaya_Naik

Re: GUI Client User to manage one Cluster or one Policy Package

PhoneBoy — Fri, 28 Aug 2020 00:08:38 GMT

I don't believe there is such an object as "administrator groups" in R80.x which would be required for this feature to work.
You can configure a given policy layer (not a given package) to only be editable by admins with specific permissions:

As for install policy by a specific admin to a specific gateway, sounds like the kind of thing we could potentially enforce with a SmartTask in R80.40.
@Dima_M have we coded anything like this in R&D even as an example?

Re: GUI Client User to manage one Cluster or one Policy Package

Danny — Fri, 28 Aug 2020 04:27:11 GMT

Upgrade to Multi-Domain Security Management and you are able to configure this.