unable to create non-security groups to for client delegation | Feature Requests

mnagel · 2020-04-27T21:15:18Z

We thought we came up with a trick to deal with letting our clients manage maintenance on many different devices. The idea was, create a group they can manage and let them add those devices to the group, then schedule maintenance and update as needed. Alas, RBAC prevents this, primarily because it lacks the ability to distinguish using groups for grouping from using groups for security. Because the users don't have manage on the devices (intentionally), they cannot add them to a group. If we could allow them to add to a non-security group, it would potentially fix this. I'm sure other options to be added by LM might work, perhaps better. This one was already somewhat concerning as granting manage to the maintenance group meant they could potentially delete the group by accident. I understand why this is broken under today's semantics, but we need a group mechanism that works as intended for this or a suitable alternative.

Discussions

unable to create non-security groups to for client delegation | Feature Requests | LogicMonitor Community