Role Based Access Control

[rida-aaliya]

I have started dividing a single network to zones and have started provisioning Roles and access based on network tags. Is there any better way to create a segregation of networks or some best practices on RBAC?

[Philip D'Ath]

What kind of roles do you envisage having? And what sort of permissions would you like them to have?

[rida-aaliya]

Thanks a lot for your response PhilipDath. we want to have 25 zones to distribute 100 plus cameras and I need to create 2 roles for each zone -Read and View access and I am trying to create micro segmentation of a big network and tag each zone and create two roles each per zone so I will have close to 50 plus roles with network tags. So wanting to know if there is a better way to solve this?

Thanks

Rida

[Philip D'Ath · Accepted solution]

Yes, that approach would work.

Also give some consideration to using SAML. You can then create named roles (which will use your tags) and then apply them to users dynamically.

https://documentation.meraki.com/MV/Advanced_Configuration/Restricting_Access_to_Cameras#Role-based_Camera_and_Sensor_Permissions_for_SAML.2FSSO

It is quite a bit of work, though, with that many roles.