Permissions can be granted on Netsight objects to define what users are permitted to do once they have logged in. This is done in a very similar way to the files and directories in a file system. Permissions can be granted on objects or entire folders, for individual users or groups, with permissions optionally being inherited from parent folders. Permissions can also be explicitly denied to users on particular objects.
In order to set the permissions on an object, you must yourself have been granted Full Control of that object, or be a System Administrator. Permissions on Netsight obejcts can then be set from the Netsight Explorer when Write Access is enabled. Right-click the object that you want to set the permissions for, and select "Edit Permissions" from the context menu. Alternatively, when viewing an object with write access enabled, you can click the "Permissions..." link. The Edit Permissions page for that object is then shown.
This page shows a list of users and user groups that have been granted or denied some permissions on the object in question. If you click on a user or group, a table is shown, displaying what permissions are available on that object, and what they apply to. If you hover the mouse over the name of any permission in the table, a more detailed description of what that permission allows you to do is shown.
The last two columns of the table are checkboxes to show if the permission is granted to or denied from the selected user or group.
To set the permissions on this object for the selected User or Group, check the boxes in the Grant and Deny columns to set the permissions as you see fit. When finished click "OK". The permissions will be updated immediately. Click "Cancel" at any time to abort without saving your modifications.
If the user or group you want to set permissions for is not already in the lists on the left-hand side of the screen, add them as follows. Either type the first few letters of the User or Group short name in the appropriate text field and select from the list that pops up. Click "Add" to add them to the list. Alternatively, click "Browse" and select them with the Netsight Explorer.
Permissions are automatically added to allow users to see graphs for reporting paths, if the reporting names and Netsight usernames in Netsight and the Central Database Facility are matched.
To access the advanced permission options for an object click "Advanced" on the Edit Permissions page. The Advanced permissions page is shown.
Advanced permission options are to do with permission inheritance. By default, all objects inherit permissions from their parent folder, where an inheritance mapping exists. To prevent an object inheriting permissions from its parent:
You can make an object inherit permissions from its parent again by re-checking the first box on the Advanced Permissions page and clicking "OK".
If you select the second checkbox on the Advanced Permissions page and click "OK", the permissions on child objects will be reset to correspond to those they inherit from this object. This option is only available on folders, since they are the only entities with child objects.
Note that advanced permission options on an object apply to all users and groups, not just one that was selected when the "Advanced" button was pushed on the "Edit Permissions" page.
Permissions are inherited from parent folders, which means there is more than one way that a user might effectively be granted or denied a permission on an object. There are therefore cases where a user might be granted a permission by one reckoning, and denied it by another simultaneously. Netsight resolves any permission conflicts as follows:
If a user has been made a System Administrator, either directly or via a Group, they automatically have Full Control of all objects in Netsight. The user retains full control regardless of any other permissions that may have been granted to or denied from them.
System Administrators can also list the permissions granted to a user or a group. From the User Admin menu, choose User Permissions. You can then choose which user or user group you want to list the permissions of. If you select a user, you are also shown any permissions this user inherits from user groups they belong to.