06-12-2008 07:50 AM
Hi All,
The NetConfig job approve option seems to come active as soon as you open the link from the e-mail, but then goes grayed out immediately. I am on the Approver list. Any suggestions???
Thank you.
06-12-2008 08:50 AM
Please post a screenshot illustrating the exact problem you're seeing. What version of Common Services is this? Is this server integrated with ACS?
06-12-2008 11:41 AM
06-12-2008 11:46 AM
You need to fix the System Identity problem. Make sure this user is properly defined in ACS, and has been given ALL CiscoWorks roles for ALL managed devices.
Also, re-verify your account's configuration. Make sure you have approver access for RME. Check your ACS group, and see what role you have for RME. Then, check the Shared Profile Components to make sure that role has the necessary tasks allowed.
06-12-2008 12:36 PM
The System Identity User is assigned to a privilelaged group to which Network Admins belong. This group has a custom role "CW Super User" assigned to all CW applications. the "CW Super User" role has every single permission available on the Shared Profile Components page for RME.
I do know the Job Approval worked earlier - not sure if it was prior to ACS integration or not. Is there anything else I can check for System Identity user as it is using the group settings for permission?
Thanks again.
06-12-2008 06:07 PM
The System Identity User must have every permissions under EVERY LMS application. Verify that this is the case. Then, do the same verification for your username. Make sure you have RME > Job Management > Job Approval task enabled.
06-13-2008 12:06 PM
I am not sure if I am missing something here. The permission is not assigned to individual user. System Identity account and admin users are part of a group and using group setting. Attached is the screenshot where the CW components are all set to use custom role "CWSuperUser" and this role has all permissions set for any CiscoWorks component.
06-13-2008 12:20 PM
But what group is YOUR user in?
06-13-2008 01:11 PM
The user who is approving the job is in the same group as the System Identity user and assigned all privileges to all devices. This is the group to which the access permissions in the screenshot apply.
06-13-2008 01:24 PM
Go to Common Services > Server > Security > System Identity Setup, and make sure the correct user is still the System Identity User. You should also re-validate your ACS integration options in LMS.
06-13-2008 01:34 PM
It suddenly occurred to me that you may no longer be configured as an approver in RME. Go to RME > Admin > Approval > Approver Details, and make sure you username shows up there with the appropriate email address. The username must match exactly how it is configured in ACS.
06-13-2008 01:46 PM
RME > Admin > Approval > Approver Details showed all the names I initially had added including System Identity user. However, when I clicked the "Synchronize with Common Services" button it lost a few. So, there seems to be some inconsistency and I need to look in to it further. Thanks for the pointer and I will update what I find.
06-17-2008 01:29 PM
I switched to Non-ACS mode and back to ACS mode and the Job Approval function seems to work now. This could have been a permission issue as there was some domain migration going on along with IP changes that could have contributed.
Thank you.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide