Policy view restriction

[Tim_Spencer]

Hi all, I'm trying to find out if it is possible to only make specific policies viewable to a specific user in R80.10. We have multiple firewall policies. I've tweaked the various account settings so they can only get readonly access but they can still see all policies. What I want to do is limit them to only see just two policy packages rather all of them. 

Does anyone know if this is possible and if so how?

Many thanks in advance!

Tim

[Danny]

Multi-Domain Security Management is a good solution for this demand.

[Tim_Spencer]

Thanks for your reply Danny. It would indeed but to be fair this is only going to be for about a month or two whilst they migrate away from us. They just want visibility of the current rules and object/groups used within. After that I can delete the packages and remove the firewalls. 

Unfortunately the 'Export' policy to csv doesn't show the IP's or contents of groups or I would have gone with that.

[Danny]

You can find helpful tools for your demand in the Code Hub section of this community.

[Tim_Spencer]

I must confess I'm rather new to CheckMates and don't know my way around. I will go and have a dig and see what I can find.

Thanks again

[Danny]

The Code Hub section is right here.

Also a search for export policy might be of help here.

[Tim_Spencer]

Much obliged. I was just looking around the Code Hub at the show package visualisation tool. Might do the trick. Will keep investigating. Thanks again for all your help

[G_W_Albrecht]

I found the answer given by Tomer Sole in Permission profile just for one inline layer:

With Permissions Per Layer, you can either have:

- Show all policies and edit specific layers

- Show and edit all policies and layers

- Not see any security policy

You cannot limit users from seeing just some of the layers with R80.10 unfortunately.