Restrict devices list based on logged in user in NSO

[neetimit]

Hi folks!

I have a requirement, where we have 2 devices groups (X and Y) on NSO (5.2.2) 

There are 2 user groups (grp A and grp B). There is inventory (static) data where we have mapped each NSO user to one of these user groups.

Now in the service yang, I want to only show the devices belonging to device group X if user belongs to grp A using leafref. But how do we check the user who has logged in and creating the service? Is there a way to implement this kind of check?

Thanks,

Neetika

[vleijon]

This is possible using the nacm rules. See the administration manual for details: https://developer.cisco.com/docs/nso/guides/#!the-aaa-infrastructure I am not sure exactly what you want, but it should be doable.