How do I restrict users from creating/deleting device types and modules?

[cdy4472]

Good Day All,

How can I restrict users from creating or deleting device types and modules?

I would like users to have the ability to add and remove devices from racks, while preventing them from adding or deleting device types, modules, and manufacturers. Ideally, these actions would be managed solely by the Netbox "admin."

In the future, once the user base becomes more familiar with the system and is less likely to create issues, we can consider granting these permissions more broadly.

Thank you for your assistance.

Chris

[pheus]

Hi Chris,

You might want to take a look at the NetBox documentation on permissions:
NetBox Permissions Documentation

To achieve what you're aiming for, I’d recommend creating a User Group with a restricted permission profile. Specifically, you can set permissions for Device Types, Module Types, Manufacturers, etc. to "view" only. This will prevent users from creating or deleting those objects, while still allowing them to manage devices within racks. Keep in mind that you need to assign the "can add", "can change", "can delete", "can view" permissions for those Object Types, which are allowed to be changed.

Once the group is configured, just assign the relevant users to it.
(You can assign permissions directly to individual users, but using groups is generally cleaner and easier to manage long-term.)

Hope this helps!

[cdy4472]

Hi Martin,

Thank you, that did it. I was trying to do everything with one permission. It didn't click with me to create multiple permissions and apply them to a group.

Seems obvious now.

Chris