Group settings vs. User settings

jason.williams · ‎06-24-2009

Which has a higher priority, group or user settings?

If a user is a member of a group with only level 1 access, but an ACS admin sets their user account to have level 15 access, which would be applied?

We are delegating ACS user creation to a different group and we do not want them giving a new user any access that is not specified by the group. Since ACS Admin rights aren't very specific, I can't prevent an admin from changing any of the advanced settings.

Thanks.

ansalaza · ‎06-24-2009

The ACS admin change will take effect...Individual user defined options take precedence over the Group Settings.

"Setup of these groups:

Enables an administrator to edit the settings for the groups in the Editable groups list..." <<< Not the Individual User configuration...

"Read access to users in these groups:

Enables read-only access to users in the Editable groups."

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/Admin.html#wp727571