Security Policies; Superuser Privileges For Provisioning Users - Cisco ONS 15600 Reference Manual

Chapter 5 Security
Table 5-2 ONS 15600 Security Levels Network View (continued)
CTC Tab Subtab
Provisioning Security
Alarm Profiles
BLSR
Overhead
Circuits
Provisionable
Patchcords (PPC)
Server Trails
VLAN DB
Profile
Maintenance Software
Diagnostics
APC
1. The action buttons in the subtab are active for all users, but the actions can be completely performed only by the users assigned with the required security
levels.

5.2.2 Security Policies

Users with Superuser security privileges can provision security policies on the ONS 15600. These
security policies include idle user timeouts, password changes, password aging, and user lockout
parameters.

5.2.2.1 Superuser Privileges for Provisioning Users

Superusers can grant permission to Provisioning users to perform a set of tasks, including retrieving the
audit log, restoring a database, clearing performance monitoring (PM) parameters, activating a software
load, and reverting a software load. These privileges can only be set using CTC network element (NE)
defaults, except the PM clearing privilege, which can be granted using the CTC Provisioning > Security
> Access tabs. For more information about setting up Superuser privileges, refer to the Cisco ONS 15600
Procedure Guide.
Actions
Users: Create/Delete
Users: Change
Active logins: Logout/Retrieve
Last Activity Time/View
Policy: Edit/View
1
Store/Delete
New/Load/Compare/Available/
Usage
Create/Edit/Delete/Upgrade
Create/Delete/Edit/Merge
Search
Create/Delete (not supported for
ONS 15600 nodes)
Create/Edit/Delete
Load/Store/Merge/Circuits
Add/Remove Rows
Download/Cancel
Retrieve/Clear
Run APC/Disable APC
Refresh
Retrieve Maintenance Provisioning
— —
Same User Same User
— —
— —
— —
X X
— —
— —
X X
— —
— —
X X
— —
— X
X X
— —
X X
Cisco ONS 15600 Reference Manual, R8.0
5.2.2 Security Policies
Superuser
— X
Same User All Users
— X
— X
X X
X X
X X
X X
X X
X X
X X
X X
X X
X X
X X
— X
X X
5-5