Unimus forum

... Even with read-only access, users can still run things like pre-defined config push templates, which could be an issue depending on what the template does. This should definitely not be possible. A user can execute a Config Push Preset only if: 1) they have write-access to Unimus itself (so Ope...

Actually just discovered that there is an OR and not an AND relationship for the tags on flows, so had to remove the tag "shared fortigate".

As a minimum, such a feature should force the user to use personal credentials to access the device, and not the credential Unimus use to backup the device. It's a very good question if Read-Only users in Unimus should have access to the Device CLI at all, and if so, how should they auth to the CLI...

Hi, Just tested this feature, and I have to say that it is more than welcome. Good work! I have a few questions regarding the setup. I think I am doing it correctly, and if so it is a bit cumbersome to work with in the use case we have. Our use case is to backup multiple VDOMs (>200) from a Fortigat...

Thanks! That was a very detailed answer, I will try to find time in the near future to read it again since I am a bit pressed for time this week. I think you covered it very well. One more thing that came up in my head, not related to the roadmap but to our way of working with Unimus, is credential ...

Hi, Jus saw that 2.5.1 is out - nice job :-) I found myself skimming through the Unimus roadmap, where I hoped to find some info on the since long mentioned enhanced RBAC model. Found nothing, but I did notice an upcoming feature "Device CLI" directly in Unimus. I fear that Unimus is becom...

Hi, I find it really annoying that the email notification seems hardcoded to about 25 lines. We have large deployments which are air-gapped so we can't use Slack or Pushover. There are internal mailservers so email works, but since Unimus often cuts the information that is also quite useless. I have...

Hi, I think the suggestions look ok, although I could not see any plans for adding user accounts in API v3. That is a tedious task when using many tags for user access. Maybe the reason is that you are doing re-work on the whole RBAC and that it just is to complicated to add that to the API in the i...

I understand. Things take time. I planned to do the automation I am looking at now about a year ago but have'nt had time until now . Direct DB manipulation would work as a workaround for now, I will definitely look into that. Thanks!

//Dan

Thank you for your quick reply. Not the answer I wanted, since even when combining the methods there are a lot of things that can't be managed. The API as of today feels neglected. One of the main reasons we chose Unimus for our rather large multi-tenant environment was it's speed and the ability to...