January 2, 2026

Policy & Permission Management: if everyone has access to everything, you don't have a system — you have chaos

⚙ AI-translated from Italian. Have a correction? Drop us a line.

It's 10:30 PM on a Friday night. One of your junior technicians, trying to help a customer, connects to the wrong router and accidentally disables the firewall rule protecting a 50-employee company's network. The customer notices on Monday morning when their infrastructure has been compromised. The call you receive isn't about "a technical mistake" — it's about lost trust and a contract you're at risk of losing. This scenario isn't science fiction. It's the daily reality for anyone managing dozens or hundreds of MikroTik devices without a granular access control system. And the problem isn't the technician's competence — it's the fact that you gave them access to something they should never have touched.

The illusion of total trust

Many MSPs and system integrators still operate with a binary logic: either you have access to everything, or you have access to nothing. This works when it's just you and maybe one colleague. But the moment your team grows — when you start working with external technicians, when you have interns who need to learn, or when you simply need to delegate parts of the work — that binary logic becomes an enormous risk. The issue isn't whether or not you trust people. The issue is that human error exists, distractions happen, and giving unrestricted access means a single click in the wrong place can cause damage wildly disproportionate to the original intent. A technician who only needs to check the status of a VPN connection has no business being able to modify routing rules or delete historical backups.

What nobody tells you until it happens

When we talk about access management, the first thing that comes to mind is cybersecurity. And rightly so — but that's not the only problem. There's an even more concrete and immediate aspect that affects day-to-day operations and costs real money. If everyone can do everything, no one is accountable for anything. When a configuration change causes a problem, reconstructing who did what becomes an archaeological dig through logs, backups, and vague recollections. You know that feeling of staring at a modified configuration and thinking, "who on earth touched this rule?" That feeling has a cost. It's time wasted hunting for the culprit instead of fixing the problem, unnecessary stress, and the perception that you've lost control of your infrastructure. Then there's compliance. If you manage corporate clients or work with companies that must adhere to specific regulations, access traceability isn't optional — it's a requirement. You need to be able to demonstrate who has access to what, who made changes, and when. If your answer is "no idea, we all share the admin password," you have a problem that goes well beyond technology.

Good access management isn't complicated — it's granular

As of July 2025, OptiWize has integrated a complete Policy & Permission Management system that lets you define exactly what each user can do, on which devices, and with what level of visibility. It's not an academic system with ten incomprehensible permission levels — it's practical and designed for people who work in the field. Want your junior technician to be able to view device status and perform basic troubleshooting, but not modify configurations or disable monitoring? You can do that. Want an external contractor to have access only to a specific client's devices, without even knowing the others exist? You can do that. Want your sales rep to view dashboards and statistics for their deals, but not be able to touch the routers? You can do that. The difference between a well-built permissions system and one that's been thrown together for appearances is that the first saves you time, while the second wastes it. If every time you need to grant limited access you have to cobble together workarounds or create dummy accounts, you're losing. If instead you have a clear matrix of roles and permissions that you apply in a few clicks, you're gaining efficiency.

Audit trail: knowing who did what (and how it saves your skin)

Beyond permissions, there's traceability. Every action performed by every user is logged. Not in the manner of a paranoid Big Brother, but as a sensible management tool. When a customer calls saying something no longer works the way it used to, instead of fumbling in the dark you can see exactly what changes were made, by whom, and when. This isn't just useful for finding who made a mistake — it's primarily useful for quickly ruling out wrong hypotheses and going straight to the point. And when you need to conduct an internal review — perhaps because a technician is leaving the team, or because you want to reorganise responsibilities — having a history of actions lets you understand who is actually doing what and how often. You might discover that the technician you thought was highly active hasn't touched anything in months, or that someone you considered junior is handling far more complexity than you imagined.

It's not paranoia — it's mature management of complexity

There comes a point in every MSP's growth when you realise that the "we're all friends and we trust each other" model is no longer enough. Not because people change, but because complexity increases. When you manage ten clients you can still keep everything in your head, but when you reach fifty or a hundred clients — with distributed teams and external collaborations — you need structure. Policy & Permission Management isn't a system for enterprise companies managing thousands of devices. It's a tool for anyone who wants to grow without proportionally increasing risk and chaos. It's the difference between managing an infrastructure like a professional and muddling through and hoping nothing serious goes wrong. Because in the end, if everyone has access to everything, it means no one is truly responsible for anything. And when a problem arises, you don't have a system to fix — you just have chaos to sort out. With angry customers waiting for a solution.

OptiWize introduced the Policy & Permission Management system in version 2.51.0. If you're managing a growing team, or simply want to sleep better knowing who can do what on your MikroTik devices, it's time to move from "everyone is admin" to "everyone in their place".

Subscribe to our newsletter!

Stay up to date on industry topics and OptiWize features

- Required field
Please enter a valid email address
Please enter a valid name
Please enter a valid phone number
Value is too small
- Required field
Please enter a valid email address
Please enter a valid name
Please enter a valid phone number
Value is too small

By clicking the button you accept our Privacy Policy

Want to explore a topic in more depth? Fill out the form and we'll get back to you as soon as possible

Email First name Last name Mobile Number of devices

10000+

- Required field
Please enter a valid email address
Please enter a valid name
Please enter a valid phone number
Value is too small
- Required field
Please enter a valid email address
Please enter a valid name
Please enter a valid phone number
Value is too small