does works support user defined groups on which i am able to define a view for certain users. i have some locations and every location has it's on network admin, every network admin should only see his devices but not the whole network
When you integrate CiscoWorks LMS 2.5 with CiscoSecure ACS (4.0 preferably) it works this way...
User account name in LMS matches a user account name in ACS. User's password in ACS is used to authenticate user in LMS.
User's ACS profile define what ACS User Group they are in.
ACS User Group can define which Network device groups (NDGs) the user/user-group has access to. So if the user (on LMS) tries to access devices that aren't permitted to his ACS user group (no NDG access), then he won't see the devices.
Another method for control is the use of ACS Shared Profile Components whereby you can develop custom user roles for CW-LMS that go beyond the 5 standard LMS roles. For each application in LMS you'll see that ACS Shared Profile Components would allow you to assign permissions (or remove them, as desired). This custom role is associated to a user group, etc, etc.
For devices the user doesn't have access to, the Common Services Device Credential Repository (DCR) device picker won't show those devices.
For devices they do have access to (from an ACS perspective), they will see them in the device picker.
Conversely, if you extend the model to using custom user roles between LMS and ACS, if the ACS system has a shared profile component setting for RME that says "no access to NetConfig" then the user won't see NetConfig in the CiscoWorks LMS launch framework.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...