...
Affected features
- 'Devices' view
- 'Zones' view
- 'Backups' view
- 'Config search' view
- 'Show scheduled tasksMass config push' view for 'Schedules'
- 'Credentials' > 'Show usage'
- 'Schedules' > 'Show scheduled tasks'
Assigning tags to devices
We can create as many tags as needed using the 'Add' button in the 'Device access tags' table.
After a tag is created, we can tag devices with this tag using the 'Manage Tag devices' table.
Switching to the 'Not tagged devices' tab, we can select devices we want to tag, and press 'Tag'.Accounts with the 'Administrator' role will also see a tag icon next to devices with any tags in the 'Devices' view.Selecting a tag and pressing "Un-tag devices" will allow us to remove devices from this tag.
(if an account is already access-limited by tags, they can only Tag/Untag devices with tags they have access to)
On the 'Devices' view, you can also see a clickable Tag icon which allows for tagging/untagging devices.
Tagging devices from Zones
Zones can add tags to all devices that belong to the Zone.
To use this, simply add a tag to a zone in the 'Zones' view, and all devices in that zone will be tagged with the selected tag(s)
Assigning tags to accounts
Tags can be applied for access restrictions to any account, to limit the access of that account only to devices with that tag.
You can use the 'Manage accounts' button for a tag to see the list of account with and without access to the devices with the tag.
Switching to the 'Not tagged accounts', we can give access to the account to the tag with the 'Tag' button.If tags are applied to an account, the account can also only see zones which also have this tag applied in the 'Zones' view.
By default, users have access to all devices present in Unimus.
You can add tag limitations to accounts in the "Device access" table in "User management".
To do this, create rules (account / tag bindings). You can add as many rules as needed to achieve proper access separation.
Usage example
We want user 'Bob' to only have access to the WiFi APs in Unimus.
For example, when Bob does a Config search for 'password', he would see results only in configs of the APs.
First we create user 'Bob' with 'Read-only' access role.
Next we create the 'APs' access tagdevice tag in "Device tags" screen.
After the tag is created, we give access to the devices with the 'APs' tag to Bob.
We select navigate to "User management > Device access", click "Add" and add to Bob's account the 'APs' tag, click 'Manage users', and tag Bob.
Now we need to tag the right devices with the 'APs' tag.
We In "Device tags" screen, we select the tag, and press 'Manage Tag devices'.
We add the tag to the appropriate devices.
After this, our 'Bob' user will only see the devices that are tagged with the 'APs' tag when using Config search, etcor any other Unimus feature.