Missing Features in the SQL Sentry Navigator Pane (Configuration Node/Rights Based Security)

1/3/2022 7:36 PM

7/15/2025 11:11 PM

After assigning Rights to a Contact/Contact Group (Open specific Contact/Contact Group > Rights tab) in the Client, the once visible Configuration tab will be missing, as well as the Contacts, Actions Log, Advisory Conditions, Global Settings, Inventory, Schedules and Windows, Site Configuration, and System Status.

This is typically a result of someone attempting to put together security groups or apply restrictions which resulted in unintended users having restrictions applied to them, thus limiting access of some client features. 
 

SQL Sentry (SQLS)

Rights-Based Security will play a large role in the restrictions of user access/visibility to some software features and monitored targets. It is recommended that the user contact their administrator prior to making any changes.

Any Right applied to a Contact/Contact Group in the SQL Sentry client will result in all administrative options being hidden from that user. 

---------------------------------------------------------------------------------------
-- Scripts are not supported under any SolarWinds support program or service. 
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further 
-- disclaims all warranties including, without limitation, any implied warranties 
-- of merchantability or of fitness for a particular purpose. The risk arising 
-- out of the use or performance of the scripts and documentation stays with you. 
-- In no event shall SolarWinds or anyone else involved in the creation, 
-- production, or delivery of the scripts be liable for any damages whatsoever 
-- (including, without limitation, damages for loss of business profits, business 
-- interruption, loss of business information, or other pecuniary loss) arising 
-- out of the use of or inability to use the scripts or documentation.
---------------------------------------------------------------------------------------

Option #1:

1. Log in as the Monitoring Service user and launch the Client.
   1. Alternatively, create a temp SQL Account with sa for the SQL Sentry DB instance > Connect SQL Sentry client to DB using that SQL Account
2. Check to see if user is a contact in the contacts list.
3. Check to see if Rights-Based Security is applied to that user.
   1. If it has Rights-Based Security:
      1. Remove those permissions from the user's Contact.
      2. Launch the Client as the user and verify that the features are back.
   2. If it does not have Rights-Based security:
      1. Remove the user from the list of Contacts.
      2. Launch the Client as the user and verify that the features are back.

Option #2:

1. Close the Client
2. Find the ObjectID for the user/group in question via the Contact table and/or any contact groups it is in via the ContactGroup table.
3. Then delete from the [Security].[ObjectPermission] where the PrincipleID matched the ObjectID of the Contact/ContactGroup object impacted with restrictions. 
   1. DELETE FROM [Security].[ObjectPermission]
      WHERE PrincipalID = '<ContactID and/or ContactGroupID>'
4. These queries below may also be helpful in finding the restrictions 
   1. SELECT c.ObjectID AS 'ContactObjectID', c.FirstName, o.ObjectName AS 'PermissionObject' FROM Contact c
      JOIN [Security].[ObjectPermission] op ON c.ObjectID = op.PrincipalID
      JOIN vwObjects o ON op.ObjectID = o.ObjectID
       
   2. SELECT cg.ObjectID AS 'ContactGroupObjectID', cg.GroupName, o.ObjectName AS 'PermissionObject' FROM ContactGroup cg
      JOIN [Security].[ObjectPermission] op ON cg.ObjectID = op.PrincipalID
      JOIN vwObjects o ON op.ObjectID = o.ObjectID
5. Re-open the Client and confirm the settings have returned.