Management

I'm working with Junos Space Network Management FIPS (22.3 I believe) and I was wondering if anyone would have insight on an implementation:

I want to give a certain Group of Users access to every Device on Space but have their own Objects (scripts, configlets, etc).

Nothing further but my insight follows:

• Currently all Users are on the Global Domain. The Users specific to this inquiry have a custom Role to limit their View/Permissions. This lets them have access to every Device but they can also view every Object within each section.
• I've Tagged Objects but I found no way to force those Users to only be able to view Objects with that specific Tag. They can choose to view things by the specific Tag but they can also view everything else.
• I've tried a sub-Domain. This would give them their own Objects but Devices are only allowed in one Domain. 
  • Partitioning seems to be a no-go based on what we're running.
• All of my information was gained by messing around in Network Management, Googling, and reading the Workspaces document. I've skimmed through Elevate and haven't found any threads with a similar issue.

Thank you!

Q : I want to give a certain Group of Users access to every Device on Space but have their own Objects (scripts, configlets, etc).

A: Not possible in Space to give access to ONLY to their own Objects (scripts, configlets, etc).

Using the domain, you can separate the devices along with all the objects and give access to specific users only.