I understand users and roles within Big-IQ. What I can't seem to find though is how to limit a user (with a role) to a specific device or device group. My Big-IQ manages several devices, I only want a user to have access to some of them.
How do I do this?
Have a look at Resource Groups - you should be able to create a group, select the items relevant to the role/BIG-IP device, and then assign that group to the user/user group.
That should limit access only to what you want them to be able to manage.
Looking through the Resource Groups I didn't see vCMP guests as one of the items that can be assign to a group. Is there a way to "lock down" only the vCMP guests that a particular user group has access to?