ACS 5.3: Create/Edit Administrator Roles

[gonnason]

We have wireless clients with mistyped user/pass lock out Windows AD accounts pretty often. Is there a way to provide Read-Only access to the Monitoring and Reports viewer?

I would assume this would be done via Roles, but I cannot see a way to create or edit them.

The ReportAdmin role can edit reports and edit the Monitoring UI (Tabs and such), so it is not as useful as it first appears.

Thanks,

Mike Gonnason

[mauzamor]

Hi there,

The roles for ACS administrators cannot be modified, and is not possible to add new ones in the current version, this could be an option in the future release.

According to the role privileges from the User Guide, the closest role to your goal will be ReportAdmin however seems like you already tested this and is not doing what you were expecting.

Documentation about roles:

http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_system/5.3/user/guide/admin_admin.html#wp1068633

Rate if it helps!