none
How to control access to IP tracking / auditing now that the RBAC role "IPAM IP Audit Administrators" is not present anymore? RRS feed

  • Question

  • Hi there,

    I couldn't find the permissions to control who can view (or manage) IP Address Tracking.

    As you can see here there's no built-in role for that: https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/create-a-user-role-for-access-control

    Regards,

    Dequester

    Monday, February 25, 2019 1:26 PM

Answers

  • Hi Zoe,

    I found the answer to my question by reading through this blog here: https://nedimmehic.org/2017/06/12/install-and-configure-ip-address-management-ipam-2016-part-3/

    There's actually no RBAC role in the IPAM console no more but there's still a local group that still has this function.

    screen.5.jpg

    Regards,

    Dequester

    • Marked as answer by Dequester Tuesday, March 5, 2019 7:57 AM
    Tuesday, March 5, 2019 7:57 AM

All replies

  • Hi,

    Thanks for posting in the forum.

    Is the member of the IPAM Administrators group available? IPAM Administrators have the privileges to view all IPAM data and perform all IPAM tasks.

    You may also would like to add a user to the IPAM IP Audit Administrators group.

     

    Hope the following pdf is helpful.

    http://www.n1vacations.com/mcsa15/IPAM%20-%20DELEGATE%20IPAM%20ADMINISTRATION.pdf

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

     

    Regards,

    Zoe


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, February 26, 2019 2:51 AM
  • Hi Zoe,

    thanks for welcoming me ;).

    Unfortunately I am quite certain that we talked at cross-purposes. I know of the table regarding the access matrix. It's in the Microsoft docs as well: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/jj878348(v=ws.11)

    My question refers to the fact that there are no IP Audit Admins anymore as you can see in the screenshot when you follow the link I've posted before: https://docs.microsoft.com/en-us/windows-server/networking/technologies/ipam/create-a-user-role-for-access-control

    So I wonder how to control the access to IP address tracking in the latest version of Server 2016.

    Regards,

    Dequester

    Tuesday, February 26, 2019 9:00 AM
  • Hi,

    Thanks for your information and sorry for the misunderstanding.

    Unfortunately based on our research these days, we haven't found any official articles for access control to IP address tracking in server 2016.

    We will perform further research and keep you posted if we have any updates.

    If you find anything helpful please also share with us. It may help other forum members who have similar questions.

    Your

    Regards,

    Zoe


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, February 28, 2019 12:44 PM
  • Hi Zoe,

    thanks for your answer. When I'm going to find something I should be happy to share it here. But my guess is you're faster than me ;).

    Regards,

    Dequester

    Thursday, February 28, 2019 4:14 PM
  • Hi,

    Your understanding and support is appreciated.

    Regards,

    Zoe


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, March 1, 2019 6:47 AM
  • Hi Zoe,

    I found the answer to my question by reading through this blog here: https://nedimmehic.org/2017/06/12/install-and-configure-ip-address-management-ipam-2016-part-3/

    There's actually no RBAC role in the IPAM console no more but there's still a local group that still has this function.

    screen.5.jpg

    Regards,

    Dequester

    • Marked as answer by Dequester Tuesday, March 5, 2019 7:57 AM
    Tuesday, March 5, 2019 7:57 AM