Secure Views - Cisco CISCOWORKS COMMON SERVICES 3.0 User Manual

Secure Views

Secure Views
User Guide for CiscoWorks Common Services
5-6
In the Group Selector pane in the Group Administration page, you can see:
CS@bundle-pc3
•
Campus@bundle-pc3
•
RME@bundle-pc3
•
DFM@bundle-pc
•
Here, CS@bundle-pc3 is the local group, and the rest are shared groups.
Secure Views allow access to devices of a group to be restricted. Secure Views
enables filtering of group membership based on user and the application task
context in which a request is made. Filtering will be performed only when
operating in ACS mode.
While operating in Non ACS mode, no filtering will be performed, and evaluating
a group results in all devices of that group being returned.
For example, if there are two users A and B configured in ACS with different set
of privileges such that A can operate on devices D1, D2, D3 and B can operate on
D4 and D5.
If B tries to perform any operation on the group to which all the above devices
belong, B will be able to see only D4 and D5. This is because B is authorized to
perform operations only on those two devices. For details on ACS login mode see
"Setting the Login Module to ACS" section on page
Chapter 5 Administering Groups
3-35.
78-16571-01