EcoStruxure IT forum
Schneider Electric support forum about installation and configuration for DCIM including EcoStruxure IT Expert, IT Advisor, Data Center Expert, and NetBotz
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 06:59 PM . Last Modified: 2024-04-03 02:48 AM
Using
https://{{HOSTNAME}/api/v8.1/user-groups?include=permissions&include=users
I used a GET request from user-groups which returned dco.json
Using the assetIds found in the above link, which all appeared to be the same, which it should not be
https://{{HOSTNAME}}/api/v8.1/assets/755b46b1-48e9-4d8e-95c4-eea2b192a96c?include=children&include=custom_properties&include=device_links&include=navigation_path
which returned the following: genericAsset.json
When looking at a particular group, you can compare this image with the group in dco.json. I'm expecting that user-groups should return different assetIds.
Using DCO 8.2.7.
(CID:143264922)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 06:59 PM . Last Modified: 2024-04-03 02:48 AM
Hi Duane,
Not sure what issue/bug is being reported here, we might need more clarification and detail description (possibly including a backup file). But based on the above description, it seems the APIs returning the permission and access rights correctly. And why do expect that user-groups should return different assetIds?
Kind regards
(CID:143755857)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 06:59 PM . Last Modified: 2024-04-03 02:48 AM
Would you be open to a webex and I would like to do something more private for sharing data as it is not public?
Basically I created 4 groups with Active Directory. Then added these to DCO and gave permissions to each group. One group has Read Only Access and is inherited, one has edit access to everything and full access as Admin user, another has full access and edit but not user access control. The last user has No access to anything but application and Lab. When I show the API request for user-groups each user has the same asset-id which is linked to the permission set. I was expecting each to have a unique assetId. I could be wrong... But if wrong how would the permissions be linked?
https://{{HOSTNAME}}/api/current/docs/index.html#!/user-groups/getGroups
followed by
https://{{HOSTNAME}}/api/current/docs/index.html#!/assets/getAsset
(CID:143755934)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM . Last Modified: 2024-04-03 02:48 AM
Hi Duane,
Many thanks for the additional info. It seems you are expecting asset id to be a group of permissions, but that's not the case. Asset ID is the id of a location or piece of equipment. It is clear that asset id is on some permissions, namely those that are about location or equipment. However, the value (such as allow or deny) should be different for the groups, but not the ID, as it refers to the same location.
Kind regards
(CID:143756373)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM . Last Modified: 2024-04-03 02:48 AM
Is there any way to refer to the individual location permissions? I wanted more than a global (EDIT, View, ADMIN, No Access) for the user groups.
(CID:143756443)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM . Last Modified: 2024-04-03 02:48 AM
Hi Duane,
It depends on what it means by refer to. If you set up some special permissions that are not global, then they will be there when you ask for group permission. If you want to know the effective permission for for example a specific room, then you can get it as asset via getAsset and see your own permission for that room. However, you cannot ask anywhere that a specific group has access to a specific room.
Kind regards
(CID:143756797)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM . Last Modified: 2023-10-20 05:03 AM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.