Limiting Access to ControlUp Agentless VMs

A user inquired about limiting access to ControlUp agentless VMs when giving the service account visibility of storage in VMware – this would bring in 191 agentless VMs and exceed their licensing capabilities. It was clarified that the only way to limit the service account is to do it at the cluster level, granting them the "NO ACCESS" role on the clusters not to be managed. The user was advised to reach out to their ControlUp sales team for further assistance on this matter.

Read the entire ‘Limiting Access to ControlUp Agentless VMs’ thread below:

when giving the service account visibility of the storage in VMware brings in 191 agentless VMs. Is there a way to limit this as i want to monitor storage but don’t have the licenses for the 191 vms

you can only control what we can see from the VMware side.

I think you can edit the vcenter permissions of the ControlUp account. Don’t let ContolUp see those resource folders.

we give the service account visibility of the host and only visibility of the VMs that we install and agent on and that all works fine we only get the host and VMs in to controlup that we want. But the VMs can be on any number of storage so we give visibility of all the storage but that brings in all the other VM’s as well

This is a good point. @member is this correct? Even if you limit the service account, vsan integration will still show all VMs and count them?

Thanks @member 😀

I don’t know… sorry

The only way to limit the service account is to do it at the cluster level. Grant the service account the "NO ACCESS" role on the clusters you don’t want to manage.

This does not work at the folder level and must be done on the clusters. It also doesn’t work at the machine level.

but when u only monitoring say 5o VM’s out of 200 can’t be done at a cluster level or please tell me i am wrong

You are correct. I’m just clarifying how you can exclude using the service account. The way I explained is the only way. I would suggest reaching out to your sales team regarding this.

thanks let me have chat with Blair see who the right person is to see what can be done

Continue reading and comment on the thread ‘Limiting Access to ControlUp Agentless VMs’.  Not a member? Join Here!