Role Based Access Control

[Rida1]

I have started dividing a single network to zones and have started provisioning Roles and access based on network tags. Is there any better way to create a segregation of networks or some best practices on RBAC?

[PhilipDAth]

What kind of roles do you envisage having?  And what sort of permissions would you like them to have?

[Rida1]

 Thanks a lot for your response PhilipDath. we want to have 25 zones to distribute 100 plus cameras  and I need to create 2 roles for each zone  -Read and View access  and I am trying to create micro segmentation of a big network and tag each zone and create two roles each per zone so I will have close to 50 plus roles with network tags. So wanting to know if there is a better way to solve this?

Thanks

Rida

[PhilipDAth · Accepted solution]

Yes, that approach would work.

Also give some consideration to using SAML.  You can then create named roles (which will use your tags) and then apply them to users dynamically.

https://documentation.meraki.com/MV/Advanced_Configuration/Restricting_Access_to_Cameras#Role-based_... 

It is quite a bit of work, though, with that many roles.