Solving Issues with the ControlUp Monitors Role

A user was experiencing issues with their security policy graying out the ControlUp Monitors role, preventing access to agents. KB article on security best practises was suggested, along with adding the service account to an appropriate role. It was noted that 8.8 On-Prem was released, containing the bugfix, and that the user would be sent a download link. Release notes were also provided.

Read the entire ‘Solving Issues with the ControlUp Monitors Role’ thread below:

A quick sanity check. To allow the monitor servers to connect to clients using the service account you need to Allow it within Security Policy.

But when I open this up in the Console all the options for the ControlUp Monitor Role are greyed out.

I cannot get it to change. Am I missing something?

Forgot to add the screenshot

as a hot fix enable it for org members

The ControlUp Monitors role is only used for automated actions. To allow the monitors to connect to agents, add the service account (primary domain identity) to a security role like ControlUp Admins

PS, automation admins, while sounding similar, is intended to assign who can created automated actions. While ControlUp Monitors controls what (script) can be an automated action

or try create a role that has the permission with the account used for the ad connection added to it (or add the account to an existing role)

The stupid thing is I talked about the exact rights needed with support before. And setup a quick next>next>finish install. Where I was able to change it. Would have to set it up again to double check.

So @member it’s actually a bug in 8.7?

I believe we addressed it in 8.8 but since it was by design it was never really considered a bug afaik. And we did address it in the security best practises as well https://support.controlup.com/v1/docs/security-policy-for-users-and-permissions-best-practices

btw 8.8 On-Prem is released as of today 🙂

Upgrade in 3 2 1…

Cool. So downloads using the existing CFShare link?

nope new one, will ping you the link. release notes: https://www.controlup.com/controlup-on-premise-release-notes/

Thank you @member for the new release information. Time to plan an update 😉

Yeah we don’t always communicate it wider the same day. It will come through, also the people who do this are from Israel so they might have other priorities

I see.. I understand.. Sorry.

Continue reading and comment on the thread ‘Solving Issues with the ControlUp Monitors Role’.  Not a member? Join Here!