Ylianst / MeshCentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.
https://meshcentral.com
Apache License 2.0
4.07k stars 545 forks source link

Enhancement Request : Grouping within MC (GUI) Device Groups #414

Closed D4V3M0NK closed 8 months ago

D4V3M0NK commented 5 years ago

Similar to Ylianst/MeshCentralRouter#67 it would be great to see grouping for Device Groups implemented on the MC2 server. As I roll out MC2 across all my systems, there are clearly defined groupings of those systems. If that were possible, especially with per group permissions being able to be allocated to specific user groups, then I could manage my deployments extremely easy as well as control the permissions accordingly.

For example, my deployments could easily be grouped as follows:

And with per-group permissions, I could assign one set of internal support users to Customers > Finance, but another different group of my support users to Customers > Aerospace (ie, those who have clearance to do so) as well as a completely different set of DevOps to Corporate > AWS / AZURE > Web servers

ghplw commented 5 years ago

I like the idea of being able to group but done such a traditional way is not very flexible and in large deployments requires a very strict structure that admins need to adhere to so that it stays standard within your organisation.

I think it would be better handled by:

  1. Add a User Groups feature so we can assign permissions to groups instead of individual users.
  2. Add a Global Tags and Device Group Tags feature with a Manage Global Tags permission set at the server level and Manage Group Tags and Assign Tags permissions set at the device group level.
  3. Add a filter which allows you to select multiple tags to filter by.

Manage - You can create, delete, modify, assign, remove at either the global or individual group level. Assign - You can assign or remove at the individual group level.

Being any more granular than that promotes micromanagement and increases complexity for the majority who don't need it.

This would allow you to easily work with very large deployments and with good planning allow you to sort by a near infinite number of other options. For example:

A tag for particular server model would allow you to quickly list all the servers from all your customers that might need a BIOS update.

Tagging by Country, State, City, Postcode or other appropriate tag for your area would make it very easy to see if all the devices in a particular area appear to be offline if you are trying to diagnose a suspected power or internet outage.

dinger1986 commented 10 months ago

I think this is done with permissions set @si458

si458 commented 8 months ago

this has indeed been completed for a long time, you have to add devices into groups, but also a new tag system was introduced too