ACC Tab no Appears

[Meshall]

Can you help me to find the ACC tab i can not found it ?

[kiwi]

Hi @Meshall ,

You're probably logged in with an Admin Role Profile that has the 'ACC' tab disabled as illustrated in the screenshot below :

Admin Role Profile

Cheers !

-Kiwi.

[aljohani1409]

i can not found it !

[BPry]

@aljohani1409,

Are you attempting to modify your access with the account that doesn't have access to ACC, or an account with superuser permissions? From the screenshot you shared it looks like you are attempting to give your limited profile additional permissions, which isn't going to work.

[aljohani1409]

Right now I'm  using admin (superadmin) still i can not found ACC ! 

[BPry]

@aljohani1409,

If your superuser isn't able to view the ACC something sounds kind of messed up. I would start by restarting the management-server and seeing if things start to show up normally, and if that doesn't work attempt to restart the box. If still no joy you'll need to contact TAC.

When it comes to your non-superuser account ensure that the assigned admin-role profile has ACC enabled either in the GUI or the XML. 

          <device>
            <webui>
              <acc>enable</acc>

[MP18]

I tested this with my PA

I can see the ACC tab with non admin user.

[Brandon_Wertz]

---

@aljohani1409 wrote:

Right now I'm  using admin (superadmin) still i can not found ACC ! 

---

@aljohani1409 as @kiwi and others have already pointed out, you're 99.9999999% probably using an account via a role that isn't configured to see the ACC tab.  

The account in your screenshot even says you're using an account called "securityadmin."  While you might preceive this role to be a "superadmin" that might be for your role/function in your company for your use of the firewall, but from the actual FIREWALL side, the administrative control of the firewall itself, I'd bet my month's pay check your "securityadmin" isn't a "superadmin."

I'd talk to the person who owns the control of your firewall.

[Brandon_Wertz]

@Meshall ... Ditto, to what I commented about @aljohani1409 had posted.  @kiwi was more than likely spot-on with identifying the issue.

[Meshall]

Thank you for your support , FYI this firewall on my test lab not production environment.  right now I'm access thought admin account

[Meshall]

I have verify my admin account roll is superuser as below snapshot

[sahithyan.subbu]

Hi Meshall,

What is the Platform/Hardware ? Is it VM ? 

And also what is the OS version and License type ?

[Brandon_Wertz]

Can you log into the FW with an account not leveraging a custom role? When you log into the FW with that account can you see the ACC tab?

You keeping showing the role, which shows what you've been configured to be able to see, and you think that's proof something is wrong.

It looks like someone has set this role up with ACC removed and for some reason they've also still allowed that account with that role to see these custom groups.

I bet if you log in with an actual admin (like I said before) you'll see that the role you're using has been disallowed from seeing ACC. "Please do the needful!!!!" (hahahahaha)

[Meshall]

^^ I have reset into default configuration and I’m able to see the ACC ,but one i upload backup configuration the ACC  will disappear 

FYI this FW is on my lab and install on VM 

[BPry]

@Meshall,

That would point towards something within the configuration itself being the issue, which would be expected from everything that you've posted. If I would have to guess at this point, it sounds like you may have overwrote a default value when you created your custom authentication profile which sort of broke things.

If you take the XML file and remove everything under <authentication-profile> until </authentication-profile> you could give that a shot with the backup that you took, you'll just have to make sure that you modify it so you have <authentication-profile/> and modify the permissions of any users to role-based. If you don't know how to work in the XML file, you'll either need to contact TAC or rebuild the configuration.