Windows Admin Center (WAC) - restricting access, tools, rights based on group membership?

[Guest /u/jwckauman]

Anyone using Windows Admin Center (WAC) and know if it can be configured to do the following?

 

• provide a different list of servers based on group membership (e.g. members of the 'QA' group can only see test servers; members of development group can only see app, web, report and DB servers, members of systems admins group can see all servers).
  
• provide a different list of tools based on group membership (e.g. members of the 'QA' group can only see 'Events', 'Scheduled Tasks', and 'Services'; 'Dev' group can only see 'Overview' and 'PowerShell'; systems admins can see all tools)
  
• provide different levels of access based on group membership (e.g. members of QA only have VIEW only access; members of Dev staff have MODIFY rights for the DEV servers, and VIEW rights for the PROD servers; Systems Admins have FULL rights to everything).
  

 

If so, does WAC have its own permission management? or does it leverage whatever access you have to the servers outside of WAC? For example, if I'm a domain admin, then WAC is going to let me do everything. If I'm a regular USER, then WAC isn't going to let me make any changes. If i'm a regular USER but have local admin rights to five servers, WAC will let me make changes on just those five servers.

 

submitted by /u/jwckauman

[link] [comments]

 

Continue reading...