Security

Reply
Contributor II
Posts: 47
Registered: ‎01-07-2013

ClearPass administrator with custom privileges

Hi

 

Would it be possible to create a ClearPass administrator with only read access to access tracker and read/write/delete permissions on the Endpoint Repository?

 

First part with Access tracker is easy, but is it possible to create granular access under the Configuration section and only allow access to the Endpoint Repository and not anything else?

 

Regards

Jonas Erlund Hammarbäck

Guru Elite
Posts: 19,972
Registered: ‎03-29-2007

Re: ClearPass administrator with custom privileges

[ Edited ]

Go to Administration> Users and Privileges> Admin privileges and import the attached file.

 

Create an admin user and Apply the imported privileges to the user.

 

EDIT:  Somehow I cannot attach an XML file.  Let me try to get that fixed.  Okay, change the attached filename extention from .txt to .xml before importing.

 

 

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Contributor II
Posts: 47
Registered: ‎01-07-2013

Re: ClearPass administrator with custom privileges

Thank you!

 

Works greate.

 

Regards

Jonas

dbo
Occasional Contributor I
Posts: 6
Registered: ‎01-09-2013

Re: ClearPass administrator with custom privileges

[ Edited ]

Hi,

 

thats cool. Do you have an overview about the

 

 <AdminTask taskid="[VAR]">

 

commands?

 

I just want to allow the service desk to create local users. Would it be like that?

 

      <AdminTask taskid="con.id.lu">
        <AdminTaskAction type="RWD"/>
      </AdminTask>

 

for CONfigure -> IDentity -> Local Users?

 

Thx in advance.

 

Regards,

Dennis

Contributor II
Posts: 47
Registered: ‎01-07-2013

Re: ClearPass administrator with custom privileges

Hi dbo

 

The information you need is now available in ClearPass Policy Manager 6.1 User Guide under section Administration\Custom Admin Privileges beginning on page 236.

 

Regards

Jonas

dbo
Occasional Contributor I
Posts: 6
Registered: ‎01-09-2013

Re: ClearPass administrator with custom privileges

Hi Jonas,

 

Thx for your fast reply and help.

 

 

I just searched the user guide version 6.0...

 

Regards,

Dennis

Contributor I
Posts: 31
Registered: ‎12-12-2012

Re: ClearPass administrator with custom privileges

Hi,

 

I know this is an old topic but does anyone know why I get the error message in the attached screenshot when logging in using these custom admin privleges? Normal admin account is fine.

 

ClearPass 6.3.1

 

Cheers

 

Chris

 

 

Guru Elite
Posts: 7,839
Registered: ‎09-08-2010

Re: ClearPass administrator with custom privileges

Did you create the XML file from scratch or export one of the pre-built roles and then change attributes?


Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor I
Posts: 31
Registered: ‎12-12-2012

Re: ClearPass administrator with custom privileges

I used cjoseph's one from the earlier post.
Contributor I
Posts: 31
Registered: ‎12-12-2012

Re: ClearPass administrator with custom privileges

Might try and export one and edit it. Maybe a problem between different clearpass versions.
Search Airheads
Showing results for 
Search instead for 
Did you mean: