Network Administrator - Guest-ambassador with monitoring privilege?

[Ole_Soerensen]

We administer many networks for the SMB segment.

Small customers are granted "Monitor-only", and if they need Client-VPN access, we also grant them "Guest-Ambassador" priviledge...  But why is it not possible for a "guest-ambassador" to do monitoring of the network... is it not possible to "merge" the two profiles in any way?  

An Administrator with both "Monitoring" and "guest-ambassador" privilege would make sense, as it is a bit hard to explain to customers, that they need two profiles (with different mail addresses).. one for monitoring and one for administering their VPN users.

Hope somebody can point me to a "work-around".

br/ Ole

[PhilipDAth]

Thinking sideways - rather than using guest ambassador, have you considered using "Sponsored Guest" instead?

https://documentation.meraki.com/MR/Encryption_and_Authentication/Sponsored_Guest

With this approach guest users use the splash page and sign up.  They have to give the email address of someone who works at the company (their sponsor).  That person then gets an email with a link to click on which approves that guest.  No login to the Meraki portal required.

If you want, you could put on a note on the splash page asking users to always put in a specific email address, or if you try a little harder and customise the page, you could probably just hard code an email address to.

Voila, no guest ambassador account required.

Note: You have to open a support ticket and request Meraki support to enable this feature.