Subscribing is a smart move!
You can subscribe to this forum after you log in or create your free account.
User & device Group Access
EcoStruxure IT forum
A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we?ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
Solved
Go to Solution
Accepted Solutions
This answer was originally posted on DCIM Support by Steven Marchetti on 2018-03-06
Hi Shaik,
The only time I have seen issues like this are when users are part of a group and the individual and the group have different permissions. The group may have rights to only one device group but the user is configured as an administrator of the server. I've also seen where someone ads an LDAP group and gives it rights but they also have local individual users that conflict with those in the groups. The user could also be part of multiple groups which could have the same effect.
As spezialist mentioned, screenshots showing information such as you see here for both the individual users and group(s) would be helpful in understanding what it is you're seeing as I too am unable to replicate your issue.
Steve
This answer was originally posted on DCIM Support by Steven Marchetti on 2018-03-06
Hi Shaik,
The only time I have seen issues like this are when users are part of a group and the individual and the group have different permissions. The group may have rights to only one device group but the user is configured as an administrator of the server. I've also seen where someone ads an LDAP group and gives it rights but they also have local individual users that conflict with those in the groups. The user could also be part of multiple groups which could have the same effect.
As spezialist mentioned, screenshots showing information such as you see here for both the individual users and group(s) would be helpful in understanding what it is you're seeing as I too am unable to replicate your issue.
Steve
This comment was originally posted on DCIM Support by Steven Marchetti on 2018-03-06
Screenshots? Can you provide specific info as to what rights he has, what devices he can see, etc? If you want someone to try and replicate what you're seeing, you need to provide more information. Here's what my admin can see:
When I create a user and give him access to only one folder with view and control access:
His access is limited to what I gave him:
You can clearly see the difference between the first and last images.
Steve
This comment was originally posted on DCIM Support by Shaik Mahboob Ali on 2018-03-06
HI Steve,
I have created a user name shaheen. Please see the attach pictures.you can understand the issue i am facing. user shaheen is having access only to one folder called "Shaheen-Cabinet Power" but this user can see all other devices also. why ?
This comment was originally posted on DCIM Support by Steven Marchetti on 2018-03-06
Hi Shaik,
Don't put him in the device viewer's group. By putting him in that group you are automatically giving him view rights to all devices. As you can clearly see in my screenshots, the user I created was not a member of any groups and had access to only those groups specifically designated. You have conflicting rights where the user has rights to only one device group but the user group you've added him to has view access to everything.
You can also create your own group and add the user to that group.
As you can see here, the user Shaik is part of Shaik's group and Shaik's group has access to the transfer switch device group:
If you log in as Shaik in this server, you can see the access he has:
You can see that he has access to 2 groups. This is because when I created the user initially, I gave him access to the UPS device group.For this response, I added him to the Shaik group and the group has access to the transfer switch device group. He has access to both as the rights of the user and the rights of the group are combined.
Make sure you don't add the user to the wrong group.
Steve
This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.
Create your free account or log in to subscribe to the forum - and gain access to more than 10,000+ support articles along with insights from experts and peers.