netbox-permissions-matrix-plugin

A NetBox plugin that shows NetBox's object permissions as a matrix: object types down the side, groups (and optionally users) across the top, and in each cell one lettered chip per action (V, A, C, D, and custom actions). Clicking chips edits NetBox's own permissions, with a review of every change before it is written.

Documentation: https://thomaschristory.github.io/netbox-permissions-matrix-plugin/

Status: pre-release. Below 1.0, read the review dialog before applying changes.

Features

• One page answers "what can this group do?" and "who can change prefixes?".
• Every action on one page, as lettered chips (V, A, C, D, R, S), with optional tabs per action; bulk toggles per row, app, column, and app per group or user. Revert last undoes one change at a time.
• New permissions are named after their actions: noc_va for view and add.
• Edits native ObjectPermission records only. No models, no migrations; uninstalling leaves a normal setup.
• Safe with shared permissions: a change for one group never changes another group's access.
• Stage, review, apply: every created, changed or deleted permission is shown first and written in one transaction.
• Who can page per object type, and a Permissions Matrix tab on each group.
• Export to YAML and import back, on the same NetBox or another one, through the same review.

Compatibility

Quick start

pip install netbox-permissions-matrix-plugin

# configuration.py
PLUGINS = ["netbox_permissions_matrix_plugin"]

Run python manage.py collectstatic --no-input, restart NetBox and open Admin > Authentication > Permissions Matrix.

Documentation

• Installation
• Quick start
• Configuration
• Design

Development

make dev           # NetBox 4.7 with the plugin on http://localhost:8000 (admin / admin)
make seed          # sample groups, users and overlapping permissions
make test          # unit tests, no NetBox needed
make test-netbox   # integration tests inside the dev stack
make lint          # ruff
make docs          # build the documentation site

License

Apache-2.0, see LICENSE.