Group settings vs. User settings

Unanswered Question
Jun 24th, 2009
User Badges:

Which has a higher priority, group or user settings?


If a user is a member of a group with only level 1 access, but an ACS admin sets their user account to have level 15 access, which would be applied?


We are delegating ACS user creation to a different group and we do not want them giving a new user any access that is not specified by the group. Since ACS Admin rights aren't very specific, I can't prevent an admin from changing any of the advanced settings.


Thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
ansalaza Wed, 06/24/2009 - 05:28
User Badges:
  • Cisco Employee,

The ACS admin change will take effect...Individual user defined options take precedence over the Group Settings.


"Setup of these groups:

Enables an administrator to edit the settings for the groups in the Editable groups list..." <<< Not the Individual User configuration...


"Read access to users in these groups:

Enables read-only access to users in the Editable groups."


http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/Admin.html#wp727571

Actions

This Discussion