Security Policies; Superuser Privileges For Provisioning Users; Idle User Timeout - Cisco ONS 15600 Manual

Chapter 5 Security
Table 5-2 ONS 15600 Security Levels—Network View (continued)
CTC Tab Subtab
Provisioning Security
Alarm Profiles
BLSR
Overhead
Circuits
Provisionable
Patchcords (PPC)
Server Trails
Maintenance Software
Diagnostics
1. The action buttons in the subtab are active for all users, but the actions can be completely performed only by the users assigned with the required security
levels.

5.2.2 Security Policies

Users with Superuser security privileges can provision security policies on the ONS 15600. These
security policies include idle user timeouts, password changes, password aging, and user lockout
parameters.

5.2.2.1 Superuser Privileges for Provisioning Users

Superusers can grant permission to Provisioning users to perform a set of tasks, including retrieving the
audit log, restoring a database, clearing performance monitoring (PM) parameters, activating a software
load, and reverting a software load. These privileges can only be set using CTC network element (NE)
defaults, except the PM clearing privilege, which can be granted using the CTC Provisioning > Security
> Access tabs. For more information about setting up Superuser privileges, refer to the Cisco ONS 15600
Procedure Guide.

5.2.2.2 Idle User Timeout

Each ONS 15600 CTC or TL1 user has a specified amount of time to leave the system idle before the
CTC window locks. CTC lockouts prevent unauthorized users from making changes. Higher-level users
have shorter idle times and lower-level users have longer or unlimited default idle periods, as shown in
Table
Actions
Users: Create/Delete
Users: Change
Active logins: Logout/Retrieve
Last Activity Time/View
Policy: Edit/View
1
Store/Delete
New/Load/Compare/Available/
Usage
Create/Edit/Delete/Upgrade
Create/Delete/Edit/Merge
Search
Create/Delete
Create/Edit/Delete
Download/Cancel
Retrieve/Clear
5-3. Superusers can change user idle times on the Provisioning > Security > Policy tabs.
Retrieve Maintenance Provisioning
— —
Same User Same User
— —
— —
— —
X X
— —
— —
X X
— —
— —
— X
X X
Cisco ONS 15600 Reference Manual, R7.0
5.2.2 Security Policies
Superuser
— X
Same User All Users
— X
— X
X X
X X
X X
X X
X X
X X
X X
X X
X X
5-5