ICM Feature Control Sets - Not being enforced

Unanswered Question
Apr 2nd, 2008
User Badges:

There seems to be very limited documentation on feature control sets but I have implemented it as described in the configuration guide. However, the restrictions that I have put in place for certain users are simply not being 'picked up'. These users have access to all ICM configuration tools regardless of what is checked in the feature control set.

The users sit in domain users.xxx.com and the IPCC environment is in ipcc.xxx.com, there is a two way transitive trust between the domains. Each user has to be granted “log on locally” to the servers running the AW so they can access Configuration Manager.

Can anyone confirm whether a user given configuration permissions using Domain Manager can then be assigned a Feature Control Set or should they be added using the ICM User List tool and assigned a control set from there?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Riccardo Bua Wed, 04/02/2008 - 10:12
User Badges:
  • Cisco Employee,

Hi Andrew,

you would need to use the ICM User List tool.

What is your ICM/IPCC Release?



andrewdhall Thu, 04/03/2008 - 02:56
User Badges:


The ICM version is 7.1(5).

I'm aware that you have to use the User List tool to apply the Feature Control set but need clarification as to whether you have to use it to initially create/add the user rather than use the Domain Manager and then apply the Feature Control.

What is the minimum set of permissions required to run Configuration Manager? It seems that the users I have applied Feature Control sets to are somehow overriding them with privileges set elsewhere.

Riccardo Bua Thu, 04/03/2008 - 04:28
User Badges:
  • Cisco Employee,

Hi Andrew,

I am afraid to run Configuration Manager you need the modify right, hence defeating the logic of feature control.

I suspect this doc answers most of your questions on how to use this option:


Please let me know if it helps.



roman3mcisco Sun, 08/23/2009 - 22:59
User Badges:

I know this is a late post but, is there a way of getting the document you are talking about. For some reason I cannot have access to it?



This Discussion