Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Page de 446
 
13-9
AsyncOS 10.0 for Cisco Content Security Management Appliances User Guide
 
Chapter 13      Distributing Administrative Tasks
  Assigning User Roles
Note
If you use the Web > Utilities > Security Services Display > Edit Security Services Display 
page to hide one of the Configuration Masters, the User Roles page also hides the corresponding 
Configuration Master column; however, privilege settings for the hidden Configuration Master 
are retained.
Editing Custom Web User Roles
Procedure 
Step 1
On the User Roles page, click the role name to display the Edit User Role page.
Step 2
Edit any of the settings: name, description, and visibility of policies and custom URL categories.
Step 3
Click Submit.
To edit privileges for a custom user role:
Navigate to the User Roles page. 
To edit access policy privileges, click “Access policies” to display a list of access policies configured 
in the Configuration Master. In the Include column, select the check boxes of the policies to which 
you want to give the user edit access. Click Submit to return to the User Roles page.
-or-
To edit custom URL category privileges, click Custom URL Categories to display a list of the 
custom URL categories defined on the Configuration Master. In the Include column, select the check 
boxes of the custom URL categories to which you want to give the user edit access. Click Submit 
to return to the User Roles page.
Deleting Custom User Roles 
If you delete a custom user role that is assigned to one or more users, you do not receive an error. 
User Roles with Access to the CLI 
Some roles can access both the GUI and the CLI: Administrator, Operator, Guest, Technician, and 
Read-Only Operator. Other roles can access the GUI only: Help Desk User, Email Administrator, Web 
Administrator, Web Policy Administrator, URL Filtering Administrator (for web security), and custom 
user. 
Using LDAP 
If you use an LDAP directory to authenticate users, you assign directory groups to user roles instead of 
to individual users. When you assign a directory group to a user role, each user in that group receives 
the permissions defined for the user role. For more information, see