- Print
- PDF
You can configure each unit to be managed by several users, each having different privileges. Privileges, also referred to as permissions, are used to grant precise levels of access to different user groups. You may choose to limit certain users to only specific configuration options, such as firmware updates, ports, , etc., while others have full access to all features.
Note: You must define the permissions to assign to user groups before defining the user accounts.
Setting Up the Administrator Account
Note: To prevent losing administrator access to the unit, you cannot modify the administrator account privileges or delete the administrator account.
CAUTION: If you, as the administrator, forget your username or password the only way to regain access to the management Web interface is to perform a factory reset. Refer to Restoring Factory Default Settings.
Defining Permissions for a Group of Users
You must first define a permission group before you can assign users to groups.
To define privileges and sub-privileges in a permission group
Access the page System ►Session ►Permissions.
Click Add or click the Group Name that you want to edit.
Select the Privileges to assign to the permission group, then click Apply.
Notes:
A "+" sign that precedes the privilege name indicates the availability of subprivileges. Clicking on the "+" will show you the available sub-privileges that can be added or revoked.
You cannot change the privileges of user group Admin. This user group has full access to all functions.
For more information on specific parameters, refer to the following table.
Group Privileges (System ►Session ►Permissions)
Parameter | Description |
---|---|
Group Name | The name of the user permission group. |
Privileges | The privileges given to the user permission group allow its members to edit, add or enable within these sections. The following commands can be used by all users regardless of their privileges:
Alarms: Edit/Add/Enable alarm reporting configurations. CFM: Edit/Add the SOAM CFM feature. Config: Import/Export configuration files through CLI. Filters: Edit/Add Layer-2 filters, IPv4 filters and VLAN: Firmware: Upgrade the firmware. Sub-privileges are available for upgrade and rollback. Flow: Add/Delete/Edit flow configurations
L2PT: Edit/Add L2 protocol tunneling rules. Log: Edit syslog configuration and view logged entries. Loop Detection: Edit/Add/Delete/Enable instance loop detection Management: Edit/Add management access to the unit:
Policies: Edit/Add/Enable policies for filtering traffic. Port: Edit/Add/Enable port configurations
Protection: Add/Edit/Enable protection:
SAT-Protocol: Edit/Add/Enable Service Activation Testing protocol. SAT Reporting: Edit/Enable Service Activation Testing reporting. Service Availability: Add/Edit/Enable the service availability instances. Service Mapping: Add/Edit CoS profiles and bandwidth regulator sets :
Shaping: Add/Edit traffic shapers database. Traffic: Edit/Enable VLAN level and Working Rate settings from the Traffic configuration TWAMP: Edit/Enable TWAMP Reflector settings. Users: Edit/Add and manage user accounts and permissions:
Y.1564: Edit/Add/Enable Y.1564 test methodology. All-add: Permission to add in all sections that are viewable All-edit: Permission to edit in all sections that are viewable All-enable: Permission to enable in all sections that are viewable |
Adding and Editing User Accounts
To add or edit a user account
Access the page System ▶Sessions ▶Users, a list of all user accounts that have been created for the unit is displayed.
Click Add or click a User Name if you want to edit a user account.
In the [User name] user settings page, complete the fields, then click Apply.
For more information on specific parameters, refer to the following table.
User Settings (System ▶Session ▶Users)
Parameter | Description |
---|---|
User Name | The login name for the account. |
First Name | The account holder's first name. |
Last Name | The account holder's last name. |
Phone Number | The account holder's phone number. |
Email Address / Email | The account holder's email address. |
Password | Enter the password for this account. Note: Passwords for locally-authenticated users are limited to 128 characters as of release 7.9.5 (previous limit of 31 characters). |
Confirm Password | Re-enter the password for this account. |
Administering User Account Privileges
You can grant different privileges or permissions to each user account if you have already defined both the user account and permission groups.
CAUTION: Modifying or reassigning the user groups for your account may result in you being unable to perform some tasks.
To give privileges to a user account
Access the page System ▶Sessions ▶Users.
Click the user name that you want to edit.
In the [User Name] user settings page, click the Permission button, the user's User Permission page is displayed. All available user permission groups are listed.
Note: You can create more groups in the Session ▶Permissions page.Select the user groups that you want to assign to this user, then click Apply.
Note: You cannot change permission group of the user admin.
Changing Passwords
To change a user's password
Access the page System ▶Sessions ▶Users.
Click the user name that you want to edit.
Enter the user's new password in both the Password and Confirm Password fields, then click Apply.
Note: If you forget your username or password, contact your Administrator for a password reset.
© 2024 Cisco and/or its affiliates. All rights reserved.
For more information about trademarks, please visit: Cisco trademarks
For more information about legal terms, please visit: Cisco legal terms
For legal information about Accedian Skylight products, please visit: Accedian legal terms and tradmarks