Update mikrotik.markdown - group policy fix (#35982)

This commit is contained in:
Maghiel Dijksman 2024-11-26 09:03:31 +01:00 committed by GitHub
parent 6e39450eff
commit bee027f938
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -62,10 +62,10 @@ If everything is working fine you can disable the pure `api` service in RouterOS
## The user privileges in RouterOS ## The user privileges in RouterOS
To use this device tracker, you only need limited privileges. To enhance the security of your MikroTik device, create a "read only" user who can connect to API and perform ping test only: To use this device tracker, you only need limited privileges. To enhance the security of your MikroTik device, create a "read only" group with solely API and ping test permissions and add a user to that group:
```bash ```bash
/user group add name=homeassistant policy=read,api,test,!local,!telnet,!ssh,!ftp,!reboot,!write,!policy,!winbox,!password,!web,!sniff,!sensitive,!romon,!dude,!tikapp /user
/user add group=homeassistant name=homeassistant group add name=homeassistant policy=read,api,test
/user set password="YOUR_PASSWORD" homeassistant add group=homeassistant name=homeassistant
``` ```