User role smartdashboard Logs and Monitor view

[Rodarcqu]

Hello,

Is it possible to create a custom view for a read only user to have access from the Smart Console just to Logs & Monitor and no to other places.

All the best,

[PhoneBoy]

Yes, you have to create a permission profile to assign to the relevant user.
In the profile, you will have to either disable access to or limit to read only the stuff in the other parts of the profile (a few items cannot be entirely disabled).
The two sections that will need to have some items enabled:

Publish the changes.
You may have to also Install Database to the Management Server (from the menu in the upper left corner).

[JacWev]

Hi PhoneBoy, 

Is it possible to create a read only account for a specific gateway. We have a customer with a lot of gateways and for troubleshooting we like to delegate some users with read only permissions to specific gateways. So the can view the logs, but only for some gateways. 

Thanks, 

Jaco 

[PhoneBoy · Accepted solution]

With SmartView, you can add a hardcoded filter for specific users: https://community.checkpoint.com/t5/Management/Limited-Permission-Profile/m-p/32868#M21934
Otherwise, what you're asking for requires Multi-Domain Management.

[JacWev]

Thanks, that will work 😉 

[RayP]

Yes, that works indeed. But not all administrators within SmartConsole are in the $RTDIR/smartview/db/domains/**/users.xml

I'm missing administrator accounts, and I see also some legacy administrator accounts that are deleted a few months ago within SmartConsole.