Cisco Cisco Clean Access 3.5

Page of 372
 
13-12
Cisco Clean Access Manager Installation and Administration Guide
OL-7044-01
Chapter 13      Administration
Admin Users
Figure 13-5
New Admin Group 
3.
Enter a Group Name for the custom admin group.
4.
Enter an optional Description for the group.
5.
In the Clean Access Servers section, Set the Default Clean Access Server Access as either read 
only
 (default) or local admin. The first option at the top of the list defines the default permissions 
when a (new) Clean Access Server is added to the managed domain. If no existing access settings 
are found for the Clean Access Server, this default access policy is used. 
6.
Set the access options next to each individual Cisco Clean Access Server as read only or local 
admin
. This allows you to give the administrator group full control over certain Clean Access 
Servers (including delete/reboot) but only view permissions on others. 
7.
In the Module Features section, set the Default Feature Access as either read only (default), 
add-edit, or full control. The first option at the top of the list defines the default permissions for 
any new feature added to the Clean Access Manager, as in the case of a software upgrade. Existing 
administrator privilege settings before the upgrade will be preserved.
8.
Select group access privileges of read only, add-edit, or full control for each individual module. 
This allows you to tailor administrative control over the modules of the Clean Access Manager per 
admin group. 
9.
Click Create Group to add the group to the Admin Groups list. 
You can edit the group later by clicking the Edit (
) button next to the group in the list. To delete the 
group click the Delete (
) icon next to the group. Users in an admin group are not removed when the 
group is deleted, but are assigned to the default Read-Only Admin group.