topic User Roles Restrictions in Network Security

User Roles Restrictions

chanccmtech — Tue, 12 Mar 2019 13:19:40 GMT

Hi all,

I have created a custom user roles in my FMC. However can I restrict these users from using CLI access to the appliance? I only require CLI access for administrator.

Need a pointer.

Thanks!

When you create a local

Marvin Rhoads — Thu, 16 Mar 2017 02:24:04 GMT

When you create a local custom user account in FirePOWER Management Center (FMC), that user only has to the FirePOWER web interface, not the command line interface (cli) or, as Cisco refers to it, the "shell".

Adding local users to the FMC shell requires you add them using the bash shell ("sudo useradd").

If you are using external authentication, you can disable it from allowing shell access when you define the external authentication object. ("Disabled" is the default there.)

Much appreciated! I wasn't

chanccmtech — Thu, 16 Mar 2017 02:24:05 GMT

Much appreciated! I wasn't sure if that was the meaning of "Shell".

Thanks for the pointer!

You're welcome. Please mark

Marvin Rhoads — Thu, 16 Mar 2017 02:52:54 GMT

You're welcome. Please mark your question as answered if it has been.