User creating exports without global read rights

,
1

Product/components used and version/fix level:

Cumulocity 1018.540.151

Detailed explanation of the problem:

User creating exports without global read rights

Question related to a free trial, or to a production (customer) instance?

production

Hi all,

is it possible that a user can create an export without global read rights?
The problem is that the user can request measurements for all devices with RestAPI, event when he is limited to a small group of devices with inventory roles.

greets

Helmut

2

It might be that the export is using a service user which has global rights assigned to do so. But for using exports you have to have global roles assigned as well: