https://community.cisco.com/t5/network-security/restrict-management-to-a-specific-device/m-p/3999987#M934571 <P>Correct - domains is the only way to do this when managing via a single FMC. Without domains any user with Admin rights can manage all devices in FMC.</P> Tue, 17 Dec 2019 14:45:29 GMT Marvin Rhoads 2019-12-17T14:45:29Z https://community.cisco.com/t5/network-security/restrict-management-to-a-specific-device/m-p/3999847#M934570 <P>Hi,&nbsp;</P><P>&nbsp;</P><P>I want to create user roles that let me create users that's only allowed to mange a specific device. This is a setup with one FMC that mange multiple devices on local sites and where we want the local IT group in each location to only have access and can manage their local device. Is this possible or do we need separate FMCs in each locations?</P><P>&nbsp;</P><P>Edit. The solution seams to be to create domains in FMC and then add specific devices to the domain.</P><P>&nbsp;</P><P>Thanks</P><P>/Jorgen</P><P>&nbsp;</P> Fri, 21 Feb 2020 17:46:08 GMT https://community.cisco.com/t5/network-security/restrict-management-to-a-specific-device/m-p/3999847#M934570 Chess Norris 2020-02-21T17:46:08Z https://community.cisco.com/t5/network-security/restrict-management-to-a-specific-device/m-p/3999987#M934571 <P>Correct - domains is the only way to do this when managing via a single FMC. Without domains any user with Admin rights can manage all devices in FMC.</P> Tue, 17 Dec 2019 14:45:29 GMT https://community.cisco.com/t5/network-security/restrict-management-to-a-specific-device/m-p/3999987#M934571 Marvin Rhoads 2019-12-17T14:45:29Z