Sophos Central Segmented Access

Hi @Nicohals, 

Are you pertaining to user roles on the central dashboard? If so? You may refer to this documentation on how to apply User roles to your admin users via the central dashboard. 

No, I understand how user roles work. My question is as above, can I limit what the lower level IT support employee can see in Central to just users of that branch?

No, You can't limit what they can see but only can apply restrictions on they accounts through roles. They'll still be able to view the full content of central just like supper admin but can't do many changes. This feature is not available on the central dashboard yet, though you can submit an Idea through our Sophos Ideas portal.

You can achieve this with an Enterprise Dashboard and each site being an unique Sub-Estate - you can then assign admins to the sub-estates and they can only log into the ones that they are assigned to.

Where can I find more information about the Enterprise dashboard such as pricing and licensing?

https://docs.sophos.com/central/Enterprise/help/en-us/central/Enterprise/concepts/About_Central_Enterprise_Dashboard.html

I am not sure on if there is a price for it (sorry, I don't deal with licenses too much) but I will look into it. Do you an Advanced license?

No problem, and I don't believe so. Under my licensing it just lists Endpoint Protection along with Intercept X amongst others (the others are not related to Central)

I just spoke with Sales and they advised that the Enterprise Dashboard is included in most licenses above the basic level. So, you should be able to turn it on. 

You might have to re-register endpoints into the new sub-estates but that is a one-time task.