...
- User is owner of the zone which is tagged by Tag1. Account of user is set with ‘All objects with tag exceptions’ policies in scope of which is Tag1 included.
- Result: User can see zone in read-only mode because he do does not have access to all devices under such a zone. User is still able to add new devices into such a zone.
- User have has access to all devices of type ‘HP 1920 switchers’switches’, and only some devices of type ‘HP 1950 switchers’ switches’ (possible to achieve per Access policies or device ownership) and want wants to create a new Backup filter for both device types.
- Result: User can create backup filter for ‘HP 1920 switchers’ switches’ but ‘HP 1950 switchers’ is switches’ are not even available in the list of Device types because user does not have access to all the devices of this particular device type.
- User have has access to all devices of type ‘HP 1920 switchers’switches’, and only some devices of type ‘HP 1950 switchers’ switches’ (possible to achieve per Access policies or device ownership) and edit edits existing Backup filter created for both device types.
- Result: User can see a filter in ‘Read only’ mode. User is able to open edit window but all options are disabled and device type ‘HP 1950 switchers’ switches’ is not even visible to user.
- User want wants to create new Per tag connector. User account is set with ‘No objects with tag exceptions’ policies in scope of which is only Tag2 is included.
- Result: User is able to create a new Per Tag connector only to Tag2 because he have has access to the tag and also to all the device which are tagged by this tag. After creation user can see in table only this one particular Per-Tag connector because he does not have access to other tags.