Admin permissions to specific devices in an org

[LeAnts]

Hi,

can admin roles be set to allow engineers only access to specific devices within an org?

we have a MX and some meraki switches under the same network.. i need to give user1 admin rights to the MX only and no access to the switches.

how can I achieve this?

thanks

[alemabrahao]

Yes, take a look at this.

https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Managing_Dashboard...

[LeAnts]

Thanks.. but this doc doesn't really answer my question.. it tells me i can have an org admin or a network admin..

org admin has access over the entire org whereas network admin will have access to whatever is in that network.

does not seem to add limitations to specific devices within a network..

or am i ready it wrong?

[alemabrahao]

No, you can only limit an administrator to a specific network at most, as you noted in the documentation.

[alemabrahao]

Sorry, the most you can do is limit within the network according to the TAG you have defined on the device.

Just note that "These privileges allow limited access to the entire network and configuration of devices that match the selected scope and tags."

[Holli69]

For this function, you must have a System Manager license.

I would like to see more granular privilege management in the future.

For example, a read-only or monitor-only privilege for a specific user only for MX and Wireless, but not for switching and others.

For example a read-only or full privilege for MX and no access to all others menus.

[PhilipDAth]

Systems Manager wont achieve ths.

[PhilipDAth]

You can't do this ntively.  There are third-party solutions like Boundless Digital that offer granular role-based access control.

https://www.boundlessdigital.com/network-management/meraki-automation/role-based-access-control/