User creating exports without global read rights

Product/components used and version/fix level:

Cumulocity 1018.540.151

Detailed explanation of the problem:

User creating exports without global read rights

Question related to a free trial, or to a production (customer) instance?

production

Hi all,

is it possible that a user can create an export without global read rights?
The problem is that the user can request measurements for all devices with RestAPI, event when he is limited to a small group of devices with inventory roles.

greets

Helmut

It might be that the export is using a service user which has global rights assigned to do so. But for using exports you have to have global roles assigned as well:

https://cumulocity.com/docs/cockpit/managing-exports/

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.