topic Restricting data accessible by admin user/group for ACC/Monitor etc in General Topics

Restricting data accessible by admin user/group for ACC/Monitor etc

KatanaNZ — Thu, 13 Oct 2011 21:39:57 GMT

Hi All,

Can I, in a system that is NOT running multiple vsys, restrict the information that can be accessed, seen etc within the ACC, monitor tab etc. Like a pre-applied data filter is overlaying the entire use?

For example, having a login that is for the head of a division, such as marketing, and when that use logs in, the only information

displaying within the ACC, is made up of information that applies to marketing, as the filter for the marketing user is based on a marketing Security Zone?

Similar in the Monitor->logs tab, in that the realtime information that is visiblity through the various logs windows ( traffic, threat etc ) is

only that to do with the Marketing Security zone?

I can see there is ability to load a pre-defined data filter, but this I assume relies on the user applying this, where I would like to have this pre-applied.

Possible?

Re: Restricting data accessible by admin user/group for ACC/Monitor etc

gswcowboy — Thu, 13 Oct 2011 21:58:44 GMT

Let me test for you. Give me some time and I'll get you an update unless some folks on KP chime in.

Regards,

Renato

Re: Restricting data accessible by admin user/group for ACC/Monitor etc

gswcowboy — Fri, 14 Oct 2011 00:53:22 GMT

Doesn't look there's a plausible solution to what you're trying to acoomplish. When creating admin roles, we can only limit access based on the pre-defined filters. You will need to submit a feature request to your local Sales SE to expand the granularity of admin roles.

Regards,

Renato