I am assuming this is a negative but is there some way to disable user access to view/modify "Access Rights" of objects in PRTG.

We have a setup where users login and via group membership can see parts of the tree. They have read/write permissions to allow them to add and remove objects in their part of the tree. This however also means they can modify "Access Rights" and see all groups that can be assigned and assign them.

Can this be disabled somehow?

Article Comments

Jog,

It sounds like you are giving the rights in the wrong place. Where are you issuing the rights to these users?

If you issue them to just the child objects you want them to have read/write permissions for, then they cannot modify the parent device. This would prevent them from gaining access to other child objects they should not have access to.

Does this make sense?

Benjamin Day
Paessler Support


Apr, 2019 - Permalink

Hi Benjamin,

Not really. Okay might not be totally clear in the issue. The user has access to exactly what he needs based on the group but of the users looks inside the group they have been granted access to and add a new device as an example (or modify an existing child object) they can override the access rights of the device and thus view the names of all available groups that can be granted access.

Consider the case where each group is a different tenant. You might not want to let a user know which other tenants are using the system.


Apr, 2019 - Permalink

Jog,

I understand now. This would be best put in our KB forum for feature requests.

How can I propose new features for PRTG?

Let me know if I can answer any other questions.

Benjamin Day
Paessler Support


Apr, 2019 - Permalink