Restricting Site Access and Configuration Visibility Using Resource Tags and RBAC Roles

Use-Case: 

This article explains how to grant network administrators visibility to the global network topology (site map) while restricting their configuration access to specific site(s) only - using "Resource Tags" and Role-Based Access Control (RBAC) in Versa Director.

How to Configure resource-Tags?

We can setup Resource-Tags at various levels, one at Workflow Template level, or Device Workflow level.

WORKFLOW-TEMPLATE:

DEVICE-WORKFLOW: 

Now under Administration > Director User Management > Organization [For Tenants] > Resource-Tags > Select the tags you would like to Map to role.

Now users mapped to this Role will only be able to view devices which has this specific Resource Tag. There can be multiple resource tags mapped to a Single RBAC role.

You can also map custom RBAC role to a "Tag". 

As per of  a test, I have logged in as a TenantOperator [As an example] and you would only see the devices tagged with the specific Resource-Tags.