Security

can someone tell me how to properly create a custom admin privilege on clearpass 6.2.6?

Please see page 214 of the CPPM 6.2 user manual. It explains how to create custom administrative privileges.

http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=11862

or go to the admin priv page and click the help button.

Hi Troy, i have tried that but what happens is i can sucessfully login using the new admin privilege but nothing shows on the page execpt the cppm hearder and footer. I am not sure what causes this kind of behavior. I have tried it several times and i get the same kind of behavior. We are using AD authentication to CPPM as primary and local user authentication as a secondary.

Try exporting one of the built-in roles and customizing it from there. Something might be wrong with your syntax.

i did that as well in case my syntax was wrong and the same happens. I did find it was easier to export one of the privileges currently in there, modify accordingly to con.id.ep, save it and then import it.

I included a picture of my .xml for you to see what i am uploading. We are currently running 6.2.6.62196 using AD authentication. I modify the appropriate area's necessary. Create role, add rule to existing role mapping. Create profile and profile to existing enforcement policy. I am beginning to think it might be a bug in the code version i am on. In reality the only part i want is con.id.ep (Endpoint Repository) but i have tried it several different ways and it doesn't show anything on the page at all except CPPM header and footer. I can see that i successfully logged in access tracker.

Your XML looks correct. I would open a TAC case.

Any update on this, I'm experiencing the same issue?

I have the same issue! I opened up a support ticket (Case Number: 1741291) today. So far, they have worked on it for a few hours and we have gotten nowhere. Any luck on a solution for this issue? Below is a screen shot of the blank dashboard I am talking about. 

My issue was a result of changes to the .xml code. You should be fine if you update your xml code in your template.