Access map
See who can reach what on a map, check access between two groups or labels, and review your own access as a member.
The access map makes your network's rules readable at a glance. In the network page's menu, admins see it as Access map and members as My access.
The map shows permissions, not physical links: devices already connect to each other directly; the map draws which connections are allowed.
Read the map
- People groups are on the left, machine labels on the right. A people group has a dashed outline, a label a solid one.
- Every line is a rule, and the arrow shows the direction of access. Label-to-label rules curve on the right, group-to-group rules on the left.
- No line means no access: nixscale allows no traffic by default.
- Under a label you see the networks it shares; a network awaiting approval is marked.
- Hover a line to see the rule's ports and how many devices it affects.
Focus on a group or label
Click a box (or select it with the keyboard and press Enter). Only that node's paths light up, ports appear on the lines and everything else fades. The side panel lists:
- For a group, its members and how many devices it covers; for a label, its devices, their addresses and its shared networks
- What the node can reach and what can reach it
To clear the focus, click an empty spot on the map or click Clear focus. To find something in a long list, type a group, label or device name into the search box.
Check access
In the Check access card, pick From and To:
- If a rule exists, it says Allowed and lists the ports. Reply traffic needs no separate rule.
- If not, it says No access. A rule in the other direction is pointed out; rules are one-way. Open this access… opens the rule form with source and destination filled in.
The Add rule from here and Add rule to here buttons in the side panel also open the form with the selected node.
Needs attention
With nothing selected, the side panel shows a network summary and the things to fix. Rules on nodes marked with an exclamation point open no traffic today:
| Situation | What it means |
|---|---|
| Group covers no devices | Rules with this group as the source open no traffic. A group applies to people's unlabeled devices (People groups). |
| No devices carry the label | Rules with this label as the destination touch no devices. |
| Label is in no rule | Nobody can reach the devices carrying it, and they can't reach anything. |
| Shared network awaits approval | It stays out of the policy until approved (Subnet routers). |
Empty labels without rules (such as the default labels every network starts with) aren't listed as issues.
List view
List shows the same information as a table: source, destination, ports and impact. With a node selected, the table shows only its rules. On narrow screens the list opens by default.
What do members see?
People with the member role see the same section as My access and only get what concerns them:
- You: the groups you're in and your connected devices.
- What you can reach: for each destination, the ports, which of your groups grants the access and the device addresses. Copy an address with Copy.
- Who can reach your devices: which group can connect to your devices, and on which ports.
- A personal access map with only those paths.
Members don't see group member lists or the network's other rules. If you can't reach something, contact your network admin.