cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
610
Views
5
Helpful
6
Replies

Cisco DNA virtual Domains

Waleed Moos
Beginner
Beginner

Hi

 

I was wondering moving from cisco prim infrastructure we had a cool setup with inter department access to prime. we created virtual domains as such and each department had their own space to manage there  equipment etc.

 

my Question is does DNA does this type of thing or is there some kind of solution around this feature? because the feel in the organization and the outside world is to gradually move from prime over to DNA right? but this would be a show stopper.

6 Replies 6

balaji.bandi
VIP Guru VIP Guru
VIP Guru

Sure Prime will be fade soon or later from the list, DNAC will be the tool for the future.

 

DNAC has role-based access - but need to good how granular you looking to do.

 

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-1-2/admin_guide/b_cisco_dna_center_admin_guide_2_1_2/b_cisco_dna_center_admin_guide_2_1_1_chapter_0100.html

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

thanx for the response

 

so basically i would like to group a few devices and only have those engineers manage that group and not have access to manage another goups devices. hope im making some sense.

i do not see that option, even in one of the tech talks I have asked this, I heard that road map - not sure when?

 

I have another vendor who captured these features and implemented them (in FW, its good features) if this is tenant-based or department-based management.

 

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi,

You can only define groupes based on functionality and not on site level.

You can create a group that are only allowed to look at assurance. But you are not able to create a group that can only look at assurance for site X.

Doug Byrd
Contributor
Contributor

I would like to bump this thread. 

 

We are in a similar situation to @Waleed Moos .  Due to regulatory requirements we need to effectively "hide" a group of devices so that only admins in a specific AD group can see.

 

Both Prime Infra and ACI APIC can provide this function.

- edited to fix spelling errors

@Doug Byrd The best way to get your voice heard by product managers is to use the Make a Wish feature in the Cisco DNA GUI.  Even if the feature has already been requested, the more voices they hear, the better.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers