Scenario:
Site A has Technician A - they should only be able to see and add devices at Site A
Site B has Technician B - they should only be able to see and add devices at Site B
Then network admin requires to view/edit devices at site A and B, but not C, and so on...
My initial thoughts below - does anyone else have any suggestions:
This would then be integrated with local AD or Entra SSO and each user will get an operator profile specific to the site they work at upon access to CPPM GUI. The operator profile will have specific roles which they can assign to devices when they register a MAC address in CPPM Guest. Each user at each site will need to view all of the devices with a specific role registered with the specific role name associated to that site, but not only the devices registered by that user, all devices registered by other users capable of adding devices at that specific site, which have been given a site specific role e.g. Site A - Printer. A network admin who then registers devices at site A and site B, can then see all devices registered at both sites, based on the roles they can assign.
Does this sound like the right approach? If not, what would be an alternative using operator profiles?