Security

last person joined: 23 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Create new account roles on ClearPass Guest

This thread has been viewed 39 times
  • 1.  Create new account roles on ClearPass Guest

    Posted Jul 03, 2013 05:30 AM

    Hello,

     

    is it possible to have more than the three pre-defined account roles on ClearPass Guest?

     

    By default, the role can either be Contractor, Guest or Employee.

     

    How do the roles created in ClearPass Policy Manager (Configuration -> Identity -> Roles) correspond to the account roles in ClearPass Guest?

     

    I am using ClearPass 6.1

     

    Thanks for your help!

     

    cheers,

    Harald



  • 2.  RE: Create new account roles on ClearPass Guest
    Best Answer

    Posted Jul 03, 2013 10:58 AM

    You can create other roles more and these options will show up under the account role to create a sponsor account in the ClearPass Guest

     

     

    Create Guest Account – ClearPass Guest – Aruba Networks_2013-07-03_10-33-00.png

     

     

    Follow these steps :

    1- Add the new Role you would like to use

    ClearPass Policy Manager - Aruba Networks_2013-07-03_10-54-24.png

     

    2 - Under the Guest Roles mapping add a new rule and add the new role 

     

    ClearPass Policy Manager - Aruba Networks_2013-07-03_10-52-23.png

     

     

    And then you should see it listed as an option 

     

    Create Guest Account – ClearPass Guest – Aruba Networks_2013-07-03_10-56-48.png

     

     

     

     



  • 3.  RE: Create new account roles on ClearPass Guest

    Posted Jul 04, 2013 04:17 AM

    Viktor,

     

    brilliant, thanks for your help! The missing link was the Role Mapping!

     

    cheers,

    Harald



  • 4.  RE: Create new account roles on ClearPass Guest

    Posted Oct 31, 2014 04:50 AM
      |   view attached

    Hello community,

     

    after I have set this settings, the new account role isn´t listed under user creation or modify.

    Forgot something else ?

     

    Thanks for support.

     

    We want to organize and sort the diffrent user groups with this option.

     

     



  • 5.  RE: Create new account roles on ClearPass Guest

    Posted Oct 31, 2014 09:39 AM

    Oh I see the problem.

     

    Only roles under the mapping "Guest Roles" will be pushed to GuestManager, why?

     

    Maybe someone can explain the GroupStructure of CPPM ?

     

    Thanks 



  • 6.  RE: Create new account roles on ClearPass Guest

    EMPLOYEE
    Posted Oct 31, 2014 09:52 AM

    Yes, in order to populate the guest role dropdown in CPG, you use the [Guest Roles] role map.



  • 7.  RE: Create new account roles on ClearPass Guest
    Best Answer

    Posted Jun 03, 2016 03:05 AM

    Is there a way to change the role mapping meant for guest roles? I changed its name and the autopopulation function stopped working. Back to the original name works again. Am I missing some field were I must enter the role mapping name to use? No doc states I cannot change the role mapping name.



  • 8.  RE: Create new account roles on ClearPass Guest

    EMPLOYEE
    Posted Jun 03, 2016 06:04 AM
    You need to duplicate the role map and then customize the new one.