BusinessObjects Board

Deny Probe Access in Instance Manager

security CMC
#1

I am working on setting up granting our users access to Instance Manager through the CMC.

  1. I have configured the CMC Tab Access so that it is set to restricted.
  2. I have created an Instance Manager Group and granted it Allow access to Instance Manager under Applications in the CMC.
  3. The Instance Manager Group has been granted access to Instance Manager under CMC Tab access for the group.
  4. The Probes Folder security is set to No Access for the Everyone group.
  5. The Instance Manager Group is not granted any rights on the Probes folder.
  6. The Test User is not a member of any other group that has access to the Probes folder.

When I log into the CMC as the Test User. I see the Instance Manager.
When I go into Instance Manager, I can see the scheduled monitoring probes.
I ran a Security Query in the CMC for my Test User on the Probes folder and it shows that the user is inheriting View permission but I can’t figure out where it is inheriting from.

image
image875×106 7.67 KB

image
image759×96 4.43 KB

I’ve checked the individual probes themselves in the Probes folder but there are not any security configurations for them individually, just at the Probes folder level.

I’m not sure where to go from here.

Has anyone been able to hide the probes from the Everyone group without putting a hard deny on them for Instance Manager?

#2

I’m seeing the same “by design” “feature”. (Couldn’t resist!)

User can see the probe instance in Instance Manager but can’t edit.
User can’t see the Probes folder under Folders in LaunchPad or the CMC.
Everyone group is set to No Access on the folder and there is no option to set security at the Probe object level. Administrators and Monitoring Users are the only groups with access and test user isn’t a member of either.

#3

Thanks. That’s what I thought the response would be but was just checking.