topic Re: Device administrator rights in General Topics

Device administrator rights

Interface — Mon, 06 Jan 2014 07:15:47 GMT

Hi,

one stupid question: why "device administrator" can't load, export/import configuration (can only superuser)? In Setup -> Operations tab only setting is - validate candidate configuration.. If i create custom Admin role with all rights, in setup -> operations tab i only can validate configuration. And reboot device, shutdown device, restart data plane settings are gone. Any idea?

Re: Device administrator rights

Interface — Mon, 06 Jan 2014 07:35:01 GMT

In administrators guide:

If you choose Dynamic, you can select any of the following pre-specified roles from the drop-down list:

• Superuser—Full access to the current device.

• Superuser (read-only)—Read-only access to the current device.

• Device Admin—Full access to a selected device, except for defining new accounts or virtual systems.

• Device administrator (read-only)—Read-only access to a selected device.

• Vsys Admin—Full access to a selected virtual system on a specific device (if multiple virtual systems are enabled).

• Vsys Admin (read-only)—Read-only access to a selected virtual system on a specific device.

• Role Based Admin—Access based on assigned roles, as defined in “Defining Administrator Roles” on page 56.

So, how i can get this device admin? Whit full access, except for defining new accounts or virtual systems? Or maybe i don't understand what full access mean..

Re: Device administrator rights

ExclusiveNetworksGermany — Tue, 07 Jan 2014 15:39:04 GMT

That is a Documentation Bug.

A Device Admin has no rights to config import or export operations

because he would be able to grant himself Superuser rights otherwise.

(export, modify config, import, commit)

Regards

Marco

Re: Device administrator rights

Interface — Wed, 08 Jan 2014 13:09:48 GMT

Hello,

I understood, thank you very much!