C H A P T E R 10 Setting Up And Managing Administrators And Policy; Administrator Privileges - Cisco Servers User Manual

Administrator Accounts
Note

Administrator Privileges

Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
10-2
Cisco Secure ACS administrator accounts have no correlation with
Cisco Secure ACS user accounts or username/password authentication.
Cisco Secure ACS stores accounts created for authentication of network
service requests and those created for Cisco Secure ACS administrative access
in separate internal databases.
This section contains the following topics:
Administrator Privileges, page 10-2
•
Adding an Administrator Account, page 10-6
•
• Editing an Administrator Account, page 10-7
Deleting an Administrator Account, page 10-9
•
You can grant appropriate privileges to each Cisco Secure ACS administrator by
assigning privileges on an administrator-by-administrator basis. You control
privileges by selecting the options in the Administrator Privileges table on the
Add Administrator or Edit Administrator pages. These options are listed below:
• User and Group Setup—Contains the following privilege options for the
User Setup and Group Setup sections of the HTML interface:
– Add/Edit users in these groups—Enables the administrator to add or
edit users and to assign users to the groups in the Editable groups list.
– Setup of these groups—Enables the administrator to edit the settings for
the groups in the Editable groups list.
– Available Groups—Lists the user groups for which the administrator
does not have edit privileges and to which the administrator cannot add
users.
Editable Groups—Lists the user groups for which the administrator
–
does have edit privileges to which the administrator account can add
users.
Chapter 10 Setting Up and Managing Administrators and Policy
78-13751-01, Version 3.0