Cisco CISCOWORKS COMMON SERVICES 3.0 User Manual page 68

About Common Services Authentication
The CiscoWorks Server authentication scheme has five default roles. They are
listed here from the least privileged to most privileged:
•
•
•
•
•
If you configure Common Services to use Non-ACS for authentication,
authorization services are provided by CiscoWorks Server.
In Non-ACS mode, you cannot change the roles, or the privileges assigned to
these roles. However, a user can be assigned a combination of these roles. See
"Setting up Local Users" section on page
In ACS mode, you can create custom roles so that you can customize
Common Services client applications to best suit your business workflow and
needs.
That is, you can create a user, and assign the user with a set of privileges, that
would suit your needs. See
and
details.
User Guide for CiscoWorks Common Services
3-22
Help Desk
Can access network status information only. Can access persisted data on the
system and cannot perform any action on a device or schedule a job which
will reach the network.
Approver
Can approve all tasks.
Network Operator
Can do all Help Desk tasks. Can do tasks related to network data collection.
Cannot do any task that requires write access on the network.
Network Administrator
Can do all Network Operators tasks. Can do tasks that result in a network
configuration change.
System Administrator.
Can perform all CiscoWorks system administration tasks.
"Creating and Modifying Roles in ACS" section on page 3-39
3-6.
"Assigning Privileges in ACS" section on page 3-38
Chapter 3 Configuring the Server
sections for
78-16571-01