vROPS 6 – How to lockdown User Groups to see only specific dashboards only

The following guide will show you how to lock down Group accounts to see only dashboards that we assign to the group when they login. This means they won’t see the Alerts, Environment, Content, and Administration page. This becomes very useful because we would like to simplify things for different user groups that login to vROPS. For example, the Storage Team should only see storage dashboards while the Monitoring Team (NOC) should only see monitoring dashboards when they login. This guide is unique in that it also shows you how to allow the user group to login remotely, view custom groups, and to be able to access the View widget as well.

Creating the Dashboard Role

  1. Click on Administration > Access Control > Roles > + Sign

  2. Provide a Name and Description and click on OK

  3. Next we need to configure the permissions for the role we just created.

    Select the Role we created earlier and click on the icon next to Permissions

  4. Expand Administration and make sure only Login Interactively is checked. This allows the user to login to vROPS remotely.

  5. Expand Content > Views Management and check the Render box. This allows a user to view the View widget. If this is not checked you will get an Internal Server Error on the view widget instead.

  6. Expand Environment > Inventory Trees and check Contain Adapter and View Dashboard Home Page. This allows your users to view custom groups (just in case you are using them) and only view the dashboard home page.

  7. Click on Update to save the settings
  8. Now we need to assign a User Group to our role. Click on User Groups tab and select the group we want to assign to the role and click on the icon
  9. Click on Next
  10. Click on Objects

  11. Configure the following
    1. Change Select Role to Dashboard Users
    2. Check the box Assign this role to this group
    3. Select the objects you want to allow the User Group to have access to
    4. Click on Finish

Sharing out Dashboard

The Next steps are we need to select specific dashboards to share out to our Groups

  1. Go to Content à Dashboards

  2. Click on Share Dashboards

  3. Select the dashboard you want to share out and drag it to the group we assigned the Dashboard Role to in the previous steps
  4. Since we want to allow our user groups to see only specific dashboards we assign to them we will need to clear everything in the Everyone group to prevent conflicts. If anything is shared in the Everyone group, all groups will see those dashboards as default. Lots of vendor dashboards are shared out to everyone by default.

    Select Everyone and select all the dashboards on the right side and click on the icon.

  5. Click on Save to update the settings. You should now be able to login as a user in the group and only see dashboards assigned to that user group.