Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

modify user roles in cw2k

Is it possible to modify the default user roles and permissions in ciscoworks? For example, I want to remove the Help Desk role's ability to open a TAC case, or to allow the Help Desk permission to view the Monitoring Console, etc.

Using Ciscoworks 2000 with CDone 5th ed. v2.1

1 ACCEPTED SOLUTION

Accepted Solutions
Blue

Re: modify user roles in cw2k

In older versions, the roles for each user as seen in the permissions are fixed and cannot be mixed n matched. Though, CMF2.2 provides support for role editing and assignment of device level permissions via the ACS integration mode.

10 REPLIES
New Member

Re: modify user roles in cw2k

Yes, it is possible. You should log in as admin and go to:

CiscoWorks server-->Setup-->Security-->Modify/Delete Users

Here you can change all the roles you want... You can see in Permission Report which options gives each rol...

Regards,

Ruben

Blue

Re: modify user roles in cw2k

In older versions, the roles for each user as seen in the permissions are fixed and cannot be mixed n matched. Though, CMF2.2 provides support for role editing and assignment of device level permissions via the ACS integration mode.

New Member

Re: modify user roles in cw2k

Thanks for pointing out the version difference. Turns out I only have CMF2.1. So my follow questions is, do you know if it's possible to download a patch for CMF (I've been digging around the site but no luck so far) or is that more of a contract-dependent issue?

Blue

Re: modify user roles in cw2k

No, it's not available as a download from CCO. You need to order it via your normal sales channel.

New Member

Re: modify user roles in cw2k

Having upgraded to 2.2 I would like to fine-tune the roles but what do you mean by "ACS integration mode?" Is it another module in CiscoWorks, or tool found elsewhere?

Blue

Re: modify user roles in cw2k

ACS integration means to use a separate TACACS+/Cisco Secure Server to control the user roles and login into CW2K

New Member

Re: modify user roles in cw2k

Hi,

If I want to use the ACS intergration in v2.2 do I need to choose for this option during installation?

Hans

New Member

Re: modify user roles in cw2k

No. You can integrate later.

New Member

Re: modify user roles in cw2k

How do you intergate ACS later?

Hans

New Member

Re: modify user roles in cw2k

Do you have any links or helpful information about using ACS to edit the permissions of roles in CW2K? We would like to remove all permissions from the Help Desk role, and modify the permissions available to the other roles. It is my understanding that this requires integration with ACS, but I cannot find information on how to make it work.

151
Views
5
Helpful
10
Replies
CreatePlease to create content