read-only access to a single switch in network

[TheAlchemist]

Hi,

Want to provide access to a single switch in Meraki Network comprising of multiple switches to a user. How best can I do it? Meraki seems to provide access to a "Network" only. Is there no way without creating a separate network? or can I create a separate network comprising only of this one switch without the use of any other MX or Security appliance?

[BlakeRichardson]

The only option would be to put the switch in its own network. Access controls are not granular enough to allow access to specific switches or access points. 

MV and MT sensors are granular like you are wanting. 

[TheAlchemist]

Can I put the MS 350 switch in its own network without a MX appliance?

Possible to have all the same connections as of now but instead of MS showing under a Mx appliance housing multiple switches, this particular switch gets its own network?

[Mloraditch]

You can and it will work, but your client tracking data in both networks will not longer be accurate. If this is some kind of lab/testing situation and is at the physical end of your topology that may be acceptable, but if it's in between in some way I would not want that, but you have to decide for yourself based on the need and its importance. You could always develop a simple API based gui to do only what the employee needs to be able to do.

[rhbirkelund]

What exactly do you need to provide access to? Does the user just need to configure ports on a specific switch?

You can use Switch Port Management, and assign these privileges to the user. He'll be able to see the entire network, but only with read-only privileges, except for the specific ports you assign to the user.

https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Managing_Dashboard...

[TheAlchemist]

Thanks much. This look really useful. Actually,  I need to provide access to one switch out of 30 switches in our stack so that a user can see this switch ports stats(as a read only) and thus I do not have to give him read only access to the whole network.