Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Working with Domains

You add a domain to Junos Space Network Management Platform to assign users, devices, and other objects to that domain. You can add, modify, and delete a domain from the Role Based Access Control workspace only if you have the privileges of a Domain Administrator and are logged in to the Global domain. You cannot create domains if you are logged in or have switched to any other domain.

Adding a Domain

You add a domain when you want to create a logical grouping of objects and users. You add a domain from the Role Based Access Control workspace. Junos Space Platform allows you to add up to five levels of subdomains under the Global domain. When you add a domain, a subdomain is created under the domain that you select.

To add a domain:

  1. On the Junos Space Network Management Platform user interface, select Role Based Access Control > Domains.

    The Domains page is displayed.

    The Domains area on the left of the page displays the domains that are currently available in tree view. The right of the page displays the details of the domain that is currently selected in the Domains area. By default, the Global domain is selected.

  2. In the Domains area, right-click the parent domain under which you want to create a domain and select Create Domain.

    This page displays two areas: Domain Information on the left and Create Domain on the right. The Create Domain area displays steps to create a domain.

  3. In the Domain Name field, enter the name of the domain.

    The domain name cannot exceed 255 characters and cannot contain commas, double quotation marks, or parentheses. Also, the name cannot start with a space.

  4. (Optional) Select the Allow users of this domain to have read and execute access to parent domain check box if you want to allow users of this domain to have read and execute access to the objects in the parent domain.
  5. (Optional) In the Description field, add a description of the domain.
  6. Click Next in the lower-left corner.

    The Assign Users for Domain page is displayed. You can assign users to the domain from this page. All users except the super user are listed in a table and available for selection.

  7. You can select users from the table, search for users by using keywords, and filter users by using tags or columns.

    • To select users by using keywords, enter the keyword in the Search field and click the Search icon.

      The list of users in the table is filtered by the keyword.

    • To filter users by their properties, select the check box next to the appropriate column on the Column Filter drop-down list.

    • To filter users by tags, select an appropriate tag from the Tag Filter drop-down list.

    • To select all users, select the Select all items across all pages check box.

    • To select some users from the table, select the check box next to their usernames.

    • To reset all filters, click Reset All.

    Note:

    Filtering columns such as Assigned Domains can help you assign users across domains quickly and effectively.

  8. Click Next.

    The Assign Devices for Domain page is displayed. You can assign devices to the domain from this page. All devices that are discovered to Junos Space Platform are listed in a table on this page.

  9. You can select devices from the table, search for devices by using keywords, and filter devices by using tags or columns.

    • To select devices by using keywords, enter the keyword in the Search field and click the Search icon.

      The list of devices in the table is filtered by keyword.

    • To filter devices by their properties, on the Column Filter drop-down list, select the check box next to the appropriate column and enter the keyword in the Search field.

    • To filter devices by tags, select an appropriate tag from the Tag Filter drop-down list.

    • To select all devices, select the Select all items across all pages check box.

    • To select some devices from the table, select the check boxes next to their names.

    Note:

    To reset all filters, click Reset All.

  10. Click Finish.

    A message box displays the job ID.

    1. You can click the job ID to see the details of the job.

      You are redirected to the Job Management page with a filtered view of the job corresponding to the addition of domain. Click the job to view the Assign Device(s) to Domain Report with details of the status of the job.

    2. Click OK.

      You are redirected to the Domains page.

      Note:

      When the new domain is created, an informational message about switching domains is displayed in a dialog box.

      Do one of the following:

      • To prevent the informational message from appearing again, ensure that the Don’t show again check box is selected and click OK. The Don’t show again check box is selected by default.

      • To allow the informational message to continue appearing, clear the Don’t show again check box and click OK.

Modifying a Domain

Only a user with the Domain Administrator role can modify a domain.

To modify a domain:

  1. On the Junos Space Network Management Platform user interface, select Role Based Access Control > Domains.

    The Domains page appears.

  2. Select the domain that you want to modify from the left pane.

    The right pane displays details about the selected domain.

  3. Click the Modify icon on the left pane.

    The Modify Domain dialog box appears.

  4. Make the necessary changes to the domain by using the Modify Domain dialog box.

    You can modify the domain name and description and allow or prevent users to have or from having read-only access to objects in the parent domain.

  5. Click Save to close the Modify Domain dialog box.
  6. On the right pane, assign or unassign users as required.

    To assign users to this domain:

    1. Click the (+) icon (Assign Users) on the right pane.

      The Assign Users page appears, displaying the Junos Space users except the super user and users who are already associated with this domain.

    2. Select one or more users to assign to this domain

      You may want to sort the data in any of the columns on the Assign Users page to quickly identify the users.

    3. Click Assign.

      You are returned to the Domains page, which displays the users that you added to this domain.

    To unassign users from this domain:

    1. Select users whom you no longer want to associate with this domain.
    2. Click the (–) icon (Unassign Users) on the right pane.

      The selected users are unassigned from this domain.

      Note:

      If one of the selected users belong only to this domain and not to any other domain, the delete action fails and the following error message is displayed:User needs to be assigned to atleast one domain

  7. Click the Assigned Devices tab to assign devices to this domain. Use the (+) icon to achieve this task.
  8. Click the Assigned Remote Profiles tab to add or remove remote profiles to or from this domain.

    1. Click the (+) icon (Assign Remote Profiles) on the right pane to add remote profiles.

    2. Click the (-) icon (Unassign Remote Profiles) on the right pane to remove remote profiles.

When you modify a domain, an audit log entry is generated.

Deleting Domains

Only a user with the Domain Administrator role can delete a domain.

Before you delete a domain, take the following points into consideration:

  • All users who are logged in to the domain must be logged out.

  • The domain is locked and users cannot move or log in to that domain unless the job fails.

  • No objects must belong to the domain that is being deleted. You need to purge and archive audit logs and job data as well as move or delete devices and all other objects in that domain to another domain before you proceed with the deletion. You must trigger the deletion of a domain only after you ensure that there are no objects in that domain. If objects exist in the domain, the deletion job fails and a list of objects to be deleted is provided in the job description.

  • Another administrator cannot create a domain with the same name as the domain that is being deleted until the domain deletion job is complete.

  • You cannot delete the Global domain.

  • You cannot delete a domain if the domain contains subdomains.

To delete a domain:

  1. On the Junos Space Network Management Platform user interface, select Role Based Access Control > Domains.

    The Domains page appears.

  2. Select the domain that you want to delete from the left pane.
  3. Click the Delete icon on the left pane.

    A confirmation dialog box appears.

  4. Click Yes on the confirmation dialog box to delete the domain.

    An information dialog box appears, displaying the job ID of the deletion job. Click the job ID to see whether the deletion of the domain is successful. If the job failed, then double-click the deletion job to determine the reasons for failure.

When the deletion of a domain fails, use the reasons listed in the job description of the domain deletion job to resolve the issue. Refer to the following example to view the reasons for the failure of a domain deletion job.

To view the reasons for the failure of a domain deletion job:

  1. On the Junos Space Network Management Platform user interface, select Jobs > Job Management.

    The Job Management page appears.

  2. Double-click the domain deletion job whose details you want to view.

    The Delete Domain Detail Report page appears. On this page, you see something similar to the following text in the Description column:

    1. Delete or reassign following users before deleting domain: {test-user-1, test-user-2, }

    2. 3 Device Object object[s] present in domain. Please remove or assign to another domain before deleting.

    3. 162 Physical Interface Object object[s] present in domain. Please remove or assign to another domain before deleting.

    4. 80 Physical Inventory Object object[s] present in domain. Please remove or assign to another domain before deleting.

    5. 24 Logical Interface Object object[s] present in domain. Please remove or assign to another domain before deleting.

  3. Analyze the report and resolve the issue. In this example, resolve point b in the previous step, which is likely to address points c, d, and e because points c, d, and e are related to the devices in point b.

    You may encounter this error if a device is assigned to the domain being deleted and you are trying to delete that domain. To resolve this error, identify the devices that are assigned to this domain from the Domains workspace and reassign the devices to another domain. For example, assume that one of the devices assigned to the domain that you are trying to delete is DeviceA.

    To reassign DeviceA to the Global domain:

    1. On the Junos Space Network Management Platform user interface, select Devices > Device Management.

      The Device Management page appears.

    2. Select DeviceA.

    3. Click Assign to Domain from the Actions menu.

      The Assign to Domain page appears, displaying all domains on the Junos Space server.

    4. Click Global.

    5. Click Assign.

      The selected device is reassigned to the Global domain.

  4. Resolve point a, which states:Delete or reassign following users before deleting domain: {test-user-1, test-user-2, }

    You may encounter this error if a user is attached to only a single domain and you are trying to delete that domain. Identify the users assigned to this domain from the Domains workspace and reassign the users to another domain. In this example, reassign test-user-1 to the Global domain.

    To reassign test-user-1 to the Global domain:

    1. On the Junos Space Network Management Platform user interface, select Role Based Access Control > User Accounts.

      The User Accounts page appears.

    2. Select test-user-1.

    3. Click the Modify User icon.

      The Modify User page appears.

    4. Click Domain Assignment on the right pane of the Modify User page.

    5. Select the Global check box.

    6. Click Finish.

      The selected user is reassigned to the Global domain.

    Repeat this procedure for test-user-2.

  5. Try deleting the domain now. You should be able to delete the domain because you have resolved the issues that were preventing you from deleting the domain.

When you delete a domain, an audit log entry is automatically generated.

Note:

If you cannot delete a domain because there are jobs and audit logs associated with that domain, switch to the domain that contains the audit logs and jobs and purge them.

Switching from One Domain to Another

If you are a user who has access to multiple domains, then you can navigate from one domain to another by using the Domain drop-down list displayed at the top center of the Junos Space user interface.

Note:

If you access the Junos Space Platform UI in two tabs of the same browser with two different domains selected and access the same page in both tabs, the information displayed on the page is based on the latest domain selected. To view pages that are accessible only in the Global domain, ensure that you are in the Global domain in the most recent tab in which you are accessing the UI.

Related Documentation