Security Permissions for AD User (Restricted Consoles)

Hi @dude,

You are correct, when it comes to the Console restrictions we are going to apply those restrictions to all accounts that are contained in that group, even if that user exists in a different group which does not have the restriction.

Rather than creating local admin accounts, would it be feasible for you to add another AD group that contains all of the non-admin users?  This would allow you continue restricting the consoles at an AD group level (so that any new users get restricted upon creation without manual intervention) without negatively impacting the administrators.

-Brian Bruno

Not really. Active Directory already has a group where any new users land on called “Domain Users” and this group is the one used in CV for Webconsole access. However the same group has all the admins that should have all the elevated permissions to consoles and webconsoles but being blocked even though I have a local group in CV where they are part of granting them access.

It is interesting that I even tested my account being part of the “masters” groups in CV, it will get restricted because it is part of Domain Users. Any way to prevent inheritance group permissions for a particular local group in CV?

As far as I am aware the only option will be to configure the restriction at another AD Group which the Administrators are not part of, that way they will not be affected by the restriction.

Is there a way to block permissions inheritance for specific users? OR to have an exception option within the group permissions where we can add users to be excluded from the rules?