Security

last person joined: 2 days ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Controlling a displayed list of guests for Active Directory Sponsors

This thread has been viewed 1 times
  • 1.  Controlling a displayed list of guests for Active Directory Sponsors

    Posted Oct 06, 2017 09:16 AM

    Hi

     

    We are deploying solution where guests are approved by sponsors from a group from Active Direcotry (we are filtering sposnors from this group in guest registration form). Everything works ok.

    We would like to achive a solution, when sponsor logging in to ClearPass Guest see only guests approved only by him.

    In this moment a sponsor from AD logging to CP Guest sees nothing.

     

    Have anybody deployed such a solution ? What is the best practice ?

    We appraciate any help

     

    regards

     

    Karol



  • 2.  RE: Controlling a displayed list of guests for Active Directory Sponsors

    Posted Oct 06, 2017 09:29 AM
    I haven't tested this but try changing the operator filter to only show accounts created by operator Under Guest Module > Administration > Operator Login > Profile used by the users


  • 3.  RE: Controlling a displayed list of guests for Active Directory Sponsors

    Posted Oct 06, 2017 08:17 PM

    Hi

     

    Thanks for the answer

     

    I have tried this option, but it seems that this option applies only when a operator create acoounts manualy not during sposnor process when he accepts guest (not create)

     

    regards

     

    Karol



  • 4.  RE: Controlling a displayed list of guests for Active Directory Sponsors

    Posted Mar 12, 2019 12:25 PM

    Hi Karol,

     

    suggested (by Victor) setting works for me.

    Sponsor users, can only see accounts approved by itself.

     

    My Clearpass run on 6.7.9 version.

     

    ciao

    Andrea