Hi there,
I've got RDM usin our internal SQL server, and we are testing roles at the moment as we want to move away from having to assign permissions user by user manually. The roles worked sort of okay for view only, but if you add edit or other permissions, they never get applied.
for example:
group1 has view only access
group2 has view + add
group3 has view + add + edit
A user can be member of group1, 2 or 3, or a combination of any of them. The end permission will be always only view. We are not sure why the role for other permissions is not applying. Why do a role with view + add + edit in reality only allows a user to view connections?
Thanks!
Hello,
Are you using Security Groups in RDM to configure the permissions in the Roles?
Best regards,
Érica Poirier
Hi Erica,
I have Security groups indeed, and in these groups I have the users without any permission. Only me as admin have explicit permissions to all these groups.
On the roles, I give permissions to the entries and add the users as members of this role.
The end result is, the users can only get view permission, no other permission is given to them regardless of the configuration I do on the role.
What do you think we can do?
Thanks!
Hello,
The usage of Security Groups in Roles doesn't allow to override permissions of another role that has more restricted permissions.
Instead of using Security Groups, you can set the permissions at the folder level.
Here is an example of what you can configure to have a working solution :
- No Security Group set on this folder.
- View permission for roles Group1, Group2 and Group3.
- Add permission for roles Group2 and Group3.
- Edit permission for role Group3.
You can get more information about Permissions section on the online help :
https://help.remotedesktopmanager.com/settings_general_security.htm
https://help.remotedesktopmanager.com/securitysystem_permissions.htm
Best regards,
Érica Poirier
I've got all my roles permissions cleared. They have no security group assigned for anything. I created custom permissions as you mentioned.
The end result is, I can't see any entry whatsoever
I read the documentation, but still doesn't cover roles.
What I'm trying to achieve is, I add a user to a group, the user has access permissions based on that group, I remove the user, access is gone. Pretty much the same as when you set NTFS permissions.
How can I achieve that?
Hello,
You can assign users to a Role from
Then, select the every user that must be assign to this role.
If this doesn't work, have you tried to do a full refresh of the data source with CTRL+F5 on your keyboard?
Best regards,
Érica Poirier
Refreshing gave results, but still, it doesn't matter which role I'm using, it is always at view only. I set up the groups exactly as you mentioned, but group 2 and 3 don't add any more permissions. I've assigned the user to just group 2 or group 3, no difference.
I really don't get it!
Thanks!
Hello,
What version of RDM are you using?
Could you post a print screen of the properties of a folder?
Best regards,
Érica Poirier
I'm using one of the latest betas, 12.4.1.0
2.PNG
1.PNG
Hello,
Could you please write us at support@devolutions.net? We want to schedule a remote session with you.
Best regards,
Érica Poirier
Hello,
@everyone, the issue was related to the usage of any special characters in the role name like the comma, the # and the &.
We recommend to only use alpha numeric characters in the role name.
Best regards,
Érica Poirier