This post is more than 5 years old
1 Rookie
•
17 Posts
0
635
August 14th, 2015 17:00
limit an SRM user scope to only a Device Grouping
Anyone out there using SRM to report on a shared environment?
Using shared fabrics, arrays and vCentre servers can an SRM user for a department or customer be setup to be able to view only particular groups of hosts and their associated storage and connectivity?
No Events found!
dnorton1
74 Posts
0
August 17th, 2015 07:00
There's a very extensive post on configuring multi-tenancy at Multi-Tenant Views (Note: the top is about ViPR Controller tenants, but the original post is about general SRM functionality.)
iq_brent
48 Posts
1
August 14th, 2015 17:00
Yes,
Watch4net supports multi-tenancy by design.
There are a many ways to achieve this , But to give you a starter ... go to Administration->Roles. Make a new roles called customerA and configure its master filter to be for example 'source=%-CUSOMTERA' this is assuming that you have a separate collector for each customer. this is a simple example and not the only way to do it. OOB you can tag a customer property so you can make the filter customer=="CUSTOMERA'.
If your device names have a customer code then do a filter like device='CSTA%'
wtg990
1 Rookie
•
17 Posts
0
August 18th, 2015 07:00
Thanks guys, useful insight
I had been trying the device grouping as these are used for the chargeback reports
unfortunately we have multiple customers sharing an array/switch etc so I think this will need some sort of data enrichment.
At the moment I'm just not sure the best way of doing that. As this is just a PoC deployment almost all the hosts are discovered passively and the device names are the only way of grouping customers. But if I use just device name for a users options none of the arrays or switches are visible by the user. So looks like there's a bit more playing around needed.