LMS 2.6 Job Approval

Unanswered Question
Joe Clarke Thu, 06/12/2008 - 08:50

Please post a screenshot illustrating the exact problem you're seeing. What version of Common Services is this? Is this server integrated with ACS?

Joe Clarke Thu, 06/12/2008 - 11:46

You need to fix the System Identity problem. Make sure this user is properly defined in ACS, and has been given ALL CiscoWorks roles for ALL managed devices.

Also, re-verify your account's configuration. Make sure you have approver access for RME. Check your ACS group, and see what role you have for RME. Then, check the Shared Profile Components to make sure that role has the necessary tasks allowed.

The System Identity User is assigned to a privilelaged group to which Network Admins belong. This group has a custom role "CW Super User" assigned to all CW applications. the "CW Super User" role has every single permission available on the Shared Profile Components page for RME.

I do know the Job Approval worked earlier - not sure if it was prior to ACS integration or not. Is there anything else I can check for System Identity user as it is using the group settings for permission?

Thanks again.

Joe Clarke Thu, 06/12/2008 - 18:07

The System Identity User must have every permissions under EVERY LMS application. Verify that this is the case. Then, do the same verification for your username. Make sure you have RME > Job Management > Job Approval task enabled.

I am not sure if I am missing something here. The permission is not assigned to individual user. System Identity account and admin users are part of a group and using group setting. Attached is the screenshot where the CW components are all set to use custom role "CWSuperUser" and this role has all permissions set for any CiscoWorks component.

Joe Clarke Fri, 06/13/2008 - 13:24

Go to Common Services > Server > Security > System Identity Setup, and make sure the correct user is still the System Identity User. You should also re-validate your ACS integration options in LMS.

Joe Clarke Fri, 06/13/2008 - 13:34

It suddenly occurred to me that you may no longer be configured as an approver in RME. Go to RME > Admin > Approval > Approver Details, and make sure you username shows up there with the appropriate email address. The username must match exactly how it is configured in ACS.

RME > Admin > Approval > Approver Details showed all the names I initially had added including System Identity user. However, when I clicked the "Synchronize with Common Services" button it lost a few. So, there seems to be some inconsistency and I need to look in to it further. Thanks for the pointer and I will update what I find.


This Discussion