Security Policy - View Only Role

If you would like to grant user permissions to access the Real-Time Console and view systems and real-time performance data, you will first need to create a Security Role for that user or an AD Group. In our example, we use the name "View Only". 

To create the "View Only" Security Role:

  1. Open the Security Policy pane at the bottom of the Console.
  2. In the Home ribbon, click the Manage Roles button.
  3. Click Add New Role...
    AddNewRole.png
  4. Under Role Name, enter View Only. Click the Add Users/Groups button to assign an Active Directory group to this security role. 
  5. Click the Search button and select the AD group that includes the domain users for which you want to grant view-only permissions. Click OK to add the new role. 
    ADUserGroup.png
  6. The new role "View Only" is now assigned to the AD group "AD_CUViewOnlyRole". Click OK to finish the role configuration. 
    NewRoleAdded.png
  7. The View Only role is now added to the list along with the other default groups ControlUp Admins, Helpdesk, and Automation Admins. Click OK and wait until the changes are applied to the Security Policy Pane. 
    NewRoleVisible.png
  8. In the Security Policy Pane, the new column "View Only" is added and you can start to assign permissions for this new role. 
    ViewOnlyRoleAdded.png

Actions to Set Permissions

Set the permission "Allow" to the following actions:

Perform organization-wide actions

Recommended actions

Launch Controllers
LaunchControllers.png

View Incidents
ViewIncidents.png

View Events
ViewEvents.png

View All Hypervisors
ViewAllHypervisors.png

Use Shared Credentials
UseSharedCredentials.png

Connect to Data Source
ConnectToDataSource.png

Optional actions to set the Allow permission:

Run Machines Actions

Connect to Windows Machine
ConnectToWindowsMachine.png
Connect to Linux Machine
ConnectToLinuxMachine.png
Event Viewer on Remote Computer**
EventViewerOnRemoteMachine.png
Monitor File System**
MonitorFileSystem.png

Installed Software

Display Installed Software **

DisplayInstalledSoftware.png
Display Installed Updates**

DisplayInstalledUpdates.png

Registry

Monitor Machine Registry **

MonitorMachineRegistry.png

Services

Monitor Services **
MonitorServices.png

** Optional: Other "View Only" settings that may require remote admin privileges

 

 

 

1-on-1 Demo
Schedule now
Price Quote
Get it now
Need a Script?
Get it here
Powered by Zendesk