Cisco Cisco Expressway Maintenance Manual
Field
Description
Usage tips
Web
access
access
Determines whether members of this group are allowed
to log in to the system using the web interface.
to log in to the system using the web interface.
Default: Yes
API
access
access
Determines whether members of this group are allowed
to access the system's status and configuration using
the Application Programming Interface (API).
to access the system's status and configuration using
the Application Programming Interface (API).
Default: Yes
This controls access to the XML and REST
APIs by systems such as Cisco TMS.
APIs by systems such as Cisco TMS.
State
Indicates if the group is enabled or disabled. Access will
be denied to members of disabled groups.
be denied to members of disabled groups.
If an administrator account belongs to more
than one administrator group with a
combination of both Enabled and Disabled
than one administrator group with a
combination of both Enabled and Disabled
states, their access will be Enabled.
Determining the access level for accounts that belong in multiple groups
If an administrator belongs to groups with different levels of access, the highest level of access is granted. Any
groups in a disabled state are ignored.
groups in a disabled state are ignored.
For example, if the following groups were configured:
Group name
Access level
Web access
API access
Administrators
Read-write
-
-
Region A
Read-only
Yes
-
Region B
Read-only
-
Yes
Region C
Read-only
Yes
Yes
The following table shows examples of the access permissions that would be granted for accounts that belong in one
or more of those groups:
or more of those groups:
Groups belonged to
Access permissions granted
Administrators and Region A
read-write access to the web interface but no API access
Administrators and Region B
read-write access to the API interface, but no web interface access
Administrators and Region C
read-write access to the web and API interfaces
Region A only
read-only access to the web interface and no API access
Resetting Forgotten Passwords
You can reset any account password by logging in to the Expressway as the default admin account or as any other
administrator account that has read-write access. If this is not possible you can reset the admin or root password via
the console.
administrator account that has read-write access. If this is not possible you can reset the admin or root password via
the console.
Changing an Administrator Account Password via GUI
You can change the password for the default administrator account and for additional local administrator accounts.
187
Cisco Expressway Administrator Guide
User Accounts