Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Group settings vs. User settings

Which has a higher priority, group or user settings?

If a user is a member of a group with only level 1 access, but an ACS admin sets their user account to have level 15 access, which would be applied?

We are delegating ACS user creation to a different group and we do not want them giving a new user any access that is not specified by the group. Since ACS Admin rights aren't very specific, I can't prevent an admin from changing any of the advanced settings.

Thanks.

1 REPLY
Bronze

Re: Group settings vs. User settings

The ACS admin change will take effect...Individual user defined options take precedence over the Group Settings.

"Setup of these groups:

Enables an administrator to edit the settings for the groups in the Editable groups list..." <<< Not the Individual User configuration...

"Read access to users in these groups:

Enables read-only access to users in the Editable groups."

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/Admin.html#wp727571

224
Views
0
Helpful
1
Replies