Group settings vs. User settings

Unanswered Question
Jun 24th, 2009

Which has a higher priority, group or user settings?

If a user is a member of a group with only level 1 access, but an ACS admin sets their user account to have level 15 access, which would be applied?

We are delegating ACS user creation to a different group and we do not want them giving a new user any access that is not specified by the group. Since ACS Admin rights aren't very specific, I can't prevent an admin from changing any of the advanced settings.

Thanks.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
ansalaza Wed, 06/24/2009 - 05:28

The ACS admin change will take effect...Individual user defined options take precedence over the Group Settings.

"Setup of these groups:

Enables an administrator to edit the settings for the groups in the Editable groups list..." <<< Not the Individual User configuration...

"Read access to users in these groups:

Enables read-only access to users in the Editable groups."

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/Admin.html#wp727571

Actions

This Discussion