Cisco Explorer 4700 Installationsanleitung PDF herunterladen (Seite 582)

100

101

15-14

Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance

OL-26645-02

Chapter 15 Managing the ACE Appliance

Managing User Roles

Use the Roles feature to add, modify, and delete user-defined roles. Predefined roles display with grey

italic text and background and cannot be deleted or modified.

A user’s role determines the tasks the user can access. Each role is associated with permissions or rules

that define what feature access this role contains.

The following sections describe how to manage user roles:

• Guidelines for Managing User Roles, page 15-14

• Role Mapping in ACE Appliance Device Manager, page 15-19

• RBAC User Role Requirements Related to Virtual Servers, page 15-27

• Displaying User Roles, page 15-28

• Creating User Roles, page 15-28

• Modifying User Roles, page 15-30

• Deleting User Roles, page 15-30

Guidelines for Managing User Roles

Use these guidelines to manage roles:

• Administrators can view and modify all roles.

• Other users can only view the roles assigned to them.

• You cannot change the default roles.

• Role permissions are different based on whether they were created in an Admin context versus a

non-admin or user context. If you want to allow users to switch between contexts, ensure they have

a predefined role. If you want to restrict a user to only their home context, assign them a customized

user role.

• Certain role features are only available to default roles, for example, an Admin role in the Admin

context would have changeto and system permissions to perform tasks like license management,

resource class management, HA setup, and so on. User-created roles cannot use these features.

Understanding Predefined Roles

The predefined roles and their default privileges are defined in Table 15-4. This table includes rule

changes for Admin and user contexts (non-admin contexts). For detailed information on role-based

access control, see the Virtualization Guide, Cisco ACE Application Control Engine. For details on how

the predefined roles are mapped to ACE Appliance Device Manager tasks/features, see Table 15-5.

You must have one of the predefined roles in the Admin context in order to use the changeto command

(which allows users to visit other contexts). Non-admin/user contexts do not have access to the changeto

command; they can only visit their home context. Context administrators, who have access to multiple

contexts, must explicitly log in to other contexts to which they have access.

1 2 ... 577 578 579 580 581 582 583 584 585 586 587 ... 647 648

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco Explorer 4700 Installationsanleitung Seite 582

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Digitale Videorecorder (DVR) Cisco Explorer 4700