Implications Of Acs Login Module On Dcr; Custom Roles And Dcr - Cisco CISCOWORKS COMMON SERVICES 3.0 User Manual

Hide thumbs Also See for CISCOWORKS COMMON SERVICES 3.0:
Table of Contents

Advertisement

Chapter 4
Managing Device and Credentials

Implications of ACS Login Module on DCR

Note

Custom Roles and DCR

78-16571-01
When Common Services is in ACS mode, you can perform operations in Device
and Credential Repository (DCR) based on role assignment in ACS.
See
Setting the Login Module to ACS
A device in DCR is mapped to a device in ACS based on IP address of that device
in DCR and ACS. If a device in DCR has no IP address, then it's display_name in
DCR is mapped to host-names available in ACS.
In DCR, you can see the buttons enabled or disabled, based on the role assigned
to you.
For example, if a user
View button enabled in DCR. Further a user can see only those devices in DCR 's
device-selector for which he has
When performing operations in DCR, evensong you select some devices and click
the appropriate button, the operation will not be performed on all selected devices
(unlike in CiscoWorks local mode). This is because the operation will be done
only on those devices for which the you has been assigned required privilege.
For example, a user
U2
Administrator role for device
in DCR. But when the user clicks on Delete, only device
This is because
has Helpdesk role for
U2
task.
You can create new roles in ACS and assign a new combination of tasks to that
role. In ACS, if a Custom role is created, a few points should be considered for
DCR related tasks because certain DCR tasks have interdependencies. If certain
tasks are included in the custom role, there will be other tasks which must also be
assigned to the role to help you carry out the operations successfully.
for details on ACS login module.
is assigned Approver role in ACS, he can see only the
U1
View Devices
is assigned Helpdesk role for device
in ACS. Now
D2
. Helpdesk role does not have Delete
D1
User Guide for CiscoWorks Common Services
Implications of ACS Login Module on DCR
task assigned in ACS.
and System
D1
is able to select both
U2
will be deleted.
D2
and
D1
D2
4-45

Advertisement

Table of Contents
loading

Table of Contents