Table 17: Changes To Edit Devices, Device Groups, & Templates Activity - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Copyright © 2010, Juniper Networks, Inc.
Specifically, the Create Device, Device Groups & Templates role no longer allows the
following directives:
importConfig
importConfigOffline
importConfigFile
importVsysDevice
A new Import Device role has been created to allow device import. However, for backward
compatibility, any roles created prior to 2008.1 with permission to "Create Devices, Device
Groups & Templates" will contain the Import Device permission as well after upgrade.
Permissions Changes in Release 2006.1
In Release 2006.1, the Create Devices, Device Groups, & Templates activity does not
allow permission to run the following directives:
Import Admin
Export Device Config To File
Import Device Config From File
The Import Device Admins role allows permission to run the Import Admin directive.
A new role (Export/Import Device Config to File) has been created to allow permission
to run the Export Device Config To File and Import Device Config From File directives.
Permissions Changes in Release 2005.3
In Release 2005.3, the Edit Devices, Device Groups, & Templates activity no longer allows
permission to run the directives listed in Table 17 on page 87. Use the activities listed in
the table instead.
Table 17: Changes to Edit Devices, Device Groups, & Templates Activity
Activity
View Configlet
Edit Device Admin
Failover Device
Device BGP Operations
Update AV Pattern
Chapter 3: Configuring Role-Based Administration
Directives
View Configlet
Set Root Admin (4.x device only)
Set Admin Ports (4.x device only)
Set Admin SSH Enable Disable (4.x device only)
Failover
Modify BGP Peer Session
BGP Refresh Route
BGP Update Route on Peer
Update AV Pattern
87