Security

Reply
MVP

Guest / Tips device database

Pretty confused as to why the /tips endpoint repository and the /guest device database are separate.

 

I have a request from a customer to have an operator profile that allows removal of devices. We're currently allowing a limit on the number of devices a user may bring on the network. Unfortunatally its the /tips endpoint repository that's used to get this working. 

And I don't know of a way to allow operators access to just that bit.

Something like this would be easy if we could use the /guest device database  for this.

 

Is there a way to achieve what is requested here? Or am I missing something obvious here?

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite

Re: Guest / Tips device database

Please download the CPPM 6.2 policy manager User Guide and search for "custom admin privileges"

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Guru Elite

Re: Guest / Tips device database

Here is the custom role we use for our Help Desk.

 

This allows access to the following:

 

MONITORING

  Live Monitoring:

     - Access Tracker

     - Analysis & Trending

     - Endpoint Profiler

 

CONFIGURATION

  Identity:

     - Endpoints

     - Guest Users

 

 

 

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<TipsContents xmlns="http://www.avendasys.com/tipsapiDefs/1.0">
  <TipsHeader exportTime="Wed Jan 08 14:55:46 EST 2014" version="6.2"/>
  <AdminPrivileges>
    <AdminPrivilege allowPasswords="true" accessType="FULL" name="Brandeis-HelpDesk" description="Role for Brandeis help desk">
      <AdminTask taskid="mon.li.ep">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
      <AdminTask taskid="con.id.ep">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
	  <AdminTask taskid="con.id.gu">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
      <AdminTask taskid="mon.li.ad">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
      <AdminTask taskid="mon.li.sp">
        <AdminTaskAction type="RWD"/>
      </AdminTask>
    </AdminPrivilege>
  </AdminPrivileges>
</TipsContents>

 


Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP

Re: Guest / Tips device database

Guess I did miss the obvious on this one. :smileyembarrassed:

 

thanks for the pointer but  I guess I'll have to check it out tomorrow Colin.

Currently ClearPass Policy Manager 6.2 User Guide from support site link goes here: https://d1x3hnhct7p62q.cloudfront.net/SupportSite/ProductionFiles/6265d2a4-9565-4e7d-8b3c-f7d6487e6e1f/Aruba_CPPM_User_Guide.pdf?Expires=1389212317&Signature=I7OGedJxllWUuUi7iZgFc0GSQEG1KuvZA5S~QcPoJodnp~n8ce0Ka6tPugsXhkJy~86IFZFCn3NsGCJI4ktaGuVg0b3I...

 

and gives me:

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Error>
<Code>AccessDenied</Code>
<Message>Access denied</Message>
</Error>
 
 
Tim, thanks a bunch for the example!
Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Guru Elite

Re: Guest / Tips device database

http://support.arubanetworks.com/DOCUMENTATION/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=11862

 

Please try that link above.

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
MVP

Re: Guest / Tips device database

Same redirect to cloudfront and an access denied xml error.

No worries, I'll check it out tomorrow at work.

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
MVP

Re: Guest / Tips device database

For those running into the same download issues:  these were caused by my HTTPS Everywhere plugin.

It forced the cloudfront.net link that housed the actual files to use https and apparently it didn't like that.

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: