topic ASDM levels of access in Network Security

ASDM levels of access

whanson — Mon, 11 Mar 2019 19:10:42 GMT

I know in the cli I can put different commands in different privilege classes but is there a way to accomplish the same thing in ASDM so say an ASDM user can see things but not alter. thx again

Re: ASDM levels of access

mirober2 — Wed, 17 Nov 2010 17:13:04 GMT

Hello,

Yes, this is all handled under the Configuration > Device Management > Users/AAA > AAA Access > Authorization section.

Here is the ASDM configuration guide for this, which should get you started:

http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/configuration_guide/access_management.html#wp1145571

Let us know if you have any questions about the configuration.

-Mike

Re: ASDM levels of access

whanson — Wed, 17 Nov 2010 19:11:17 GMT

Thanks as always but just want to make sure that ASDM can be restricted based on local user and doesn't require RADIUS.

Bill

Re: ASDM levels of access

mirober2 — Wed, 17 Nov 2010 19:30:50 GMT

Hi Bill,

Yes, it does support using the LOCAL database and does not require RADIUS. When you enable command authorization, just select LOCAL from the service group drop-down menu and it will check the privilege level against the local user database.

Hope that helps.

-Mike

Re: ASDM levels of access

whanson — Thu, 18 Nov 2010 00:06:43 GMT

Thanks again