Read-only admin can cycle switch ports???

[sungod]

One of our customers contacted me after they had an issue with a switch port/connected device.

I was surprised when they told me they had cycled the port, they have only organization read access, they do not have any other permissions such as port management privileges.

I can see in the event log that the port was cycled a few times.

Is it really correct that a read-only admin can cycle ports? I would not expect read-only access to permit any impact on device operation.

[sungod]

@TonyC1

thanks for the update.

The option to disable would be a solution as no one I've spoken to so far in our customers (we're an MSP) realises this is accessible to their read-only users.

[Raphael_L]

Something curious :

https://documentation.meraki.com/MI/MI_WAN_Health

The speed tests are currently available for download speed only and can only be run by Dashboard Administrators who have writing configuration privileges.

How hard would it be to retrofit that logic to problematic features that RO users have ? ( port cycle , cable tests , reboot devices [...] )

[Raphael_L]

Now documented in : https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Managing_Dashboard_Administrators_and_Permissions

Read-Only admins can perform switch port cycles and cable tests