EcoStruxure IT forum
A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 06:59 PM
This question was originally posted on DCIM Support by Duane Crouch on 2019-05-02
Using
https://{{HOSTNAME}/api/v8.1/user-groups?include=permissions&include=users
I used a GET request from user-groups which returned dco.json
Using the assetIds found in the above link, which all appeared to be the same, which it should not be
https://{{HOSTNAME}}/api/v8.1/assets/755b46b1-48e9-4d8e-95c4-eea2b192a96c?include=children&include=custom_properties&include=device_links&include=navigation_path
which returned the following: genericAsset.json
When looking at a particular group, you can compare this image with the group in dco.json. I'm expecting that user-groups should return different assetIds.
Using DCO 8.2.7.
(CID:143264922)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 06:59 PM
This answer was originally posted on DCIM Support by Jef Faridi on 2019-05-07
Hi Duane,
Not sure what issue/bug is being reported here, we might need more clarification and detail description (possibly including a backup file). But based on the above description, it seems the APIs returning the permission and access rights correctly. And why do expect that user-groups should return different assetIds?
Kind regards
(CID:143755857)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 06:59 PM
This comment was originally posted on DCIM Support by Duane Crouch on 2019-05-07
Would you be open to a webex and I would like to do something more private for sharing data as it is not public?
Basically I created 4 groups with Active Directory. Then added these to DCO and gave permissions to each group. One group has Read Only Access and is inherited, one has edit access to everything and full access as Admin user, another has full access and edit but not user access control. The last user has No access to anything but application and Lab. When I show the API request for user-groups each user has the same asset-id which is linked to the permission set. I was expecting each to have a unique assetId. I could be wrong... But if wrong how would the permissions be linked?
https://{{HOSTNAME}}/api/current/docs/index.html#!/user-groups/getGroups
followed by
https://{{HOSTNAME}}/api/current/docs/index.html#!/assets/getAsset
(CID:143755934)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM
This comment was originally posted on DCIM Support by Jef Faridi on 2019-05-08
Hi Duane,
Many thanks for the additional info. It seems you are expecting asset id to be a group of permissions, but that's not the case. Asset ID is the id of a location or piece of equipment. It is clear that asset id is on some permissions, namely those that are about location or equipment. However, the value (such as allow or deny) should be different for the groups, but not the ID, as it refers to the same location.
Kind regards
(CID:143756373)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM
This comment was originally posted on DCIM Support by Duane Crouch on 2019-05-08
Is there any way to refer to the individual location permissions? I wanted more than a global (EDIT, View, ADMIN, No Access) for the user groups.
(CID:143756443)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM
This comment was originally posted on DCIM Support by Jef Faridi on 2019-05-09
Hi Duane,
It depends on what it means by refer to. If you set up some special permissions that are not global, then they will be there when you ask for group permission. If you want to know the effective permission for for example a specific room, then you can get it as asset via getAsset and see your own permission for that room. However, you cannot ask anywhere that a specific group has access to a specific room.
Kind regards
(CID:143756797)
Link copied. Please paste this link to share this article on your social media post.
Link copied. Please paste this link to share this article on your social media post.
Posted: 2020-07-05 07:00 PM
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Link copied. Please paste this link to share this article on your social media post.
Create your free account or log in to subscribe to the forum - and gain access to more than 10,000+ support articles along with insights from experts and peers.