Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN Config Export (and other) permission won't show VPN menu

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 2 Posters 111 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JeGrJ
      JeGr LAYER 8 Moderator
      last edited by

      Hi,

      we wanted to test a user for 1st level supporters, so they can e.g. create user certificates, add users and export those user's VPN config.

      Problem is:

      • Certificate permission grants that user the menu System / certificates - check
      • Freeradius permission lets them see Services / Freeradius and create users - a bit more than I'd like but OK, check.
      • OpenVPN client export gets them the client export page as "default dashboard". But: when you leave that page, the user does not have any privilege to see the "VPN" menu or "OpenVPN" under that.

      So essentially either you have to bookmark the client export page or log out and back in to get it back. VPN menu won't show.
      It also won't show if the user has CSO permission, Client permission etc. - only when you give it Server permission, the menu shows up. But that opens up the VPN server for editing and we want to minimize the error margin.

      So is there a quick fix, to let the menu (VPN)/submenu (OpenVPN) show up when only giving Client Export privileges?

      11e5820c-294d-41b0-b3df-ab065db8a67e-image.png

      (Screenshot shows problem: after logging in you have the client export as "Dashboard" replacement, but no VPN menu to come back to it later!)

      Cheers
      \jens

      Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

      If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

      1 Reply Last reply Reply Quote 0
      • H
        hrx
        last edited by hrx

        Hi Jens,

        I would suggest the following: Set the ‘WebCfg – OpenVPN: Client Export Utility’ permission as the user's first permission (i.e. so that it appears at the top of the list).

        This will allow the user to access the Client Export Utility via the pfSense logo, as the first permission effectively sets the ‘homepage’.

        Best regards,
        Hagen

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.