Cisco ACS 5.1 - Generate Reports

[Rafael Trujilho]

All,

I need to provide a user that has access to ACS restricted to generate reports only, and I want to release only a single report and that the user can not create new reports and not change what is available.

Is It possible?

Thanks!

--

Rafael Trujilho

[Eduardo Aliaga]

No, it's not possible. For an administrator to use "ACS View" (which is the monitor and report interface of ACS 5.x) you must assign that administrator to the role of "ReportAdmin". With that role you can modify and delete the reports already created.

[Rafael Trujilho]

For the pre-defined rules is not possible.

If I customize an access rule to monitor and report? Is that possible? Or in any way is this possible?

Thanks!

--

Rafael Trujilho

[Eduardo Aliaga]

What do you mean to configure an "access rule" to monitor and report ?

All  kind of rules are used in ACS  to configure AAA.

ACS is one software and "ACS view" is another software. Both happens to be in the same appliance, but still are differente software.

AAA rules don-t apply to "ACS view".

[Tiago Antunes]

Hi Rafael,

Like Eduardo said, AAA rules have nothing to do with the administrator access privileges.

On ACS you have different kinds ofadmin roles you can assign to administrators.

You can find them in

System Administration >

... >

Administrators >

Roles

ChangeAdminPassword     Allows password change operation for administrators
ChangeUserPassword     Dedicated role for changing users passwords only
NetworkDeviceAdmin     Network Devices Administrator
PolicyAdmin     Policy Administrator
ReadOnlyAdmin     Read only access to all resources
ReportAdmin     Read Only Access on Logs
SecurityAdmin     Permissions Administrator for ACS
SuperAdmin     Super Administrator for ACS
SystemAdmin     System Administrator
UserAdmin     Users Administrator

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

[Rafael Trujilho]

Thanks for answered.

Perfect, these considerations I already knew.

A question was once owned by ReportAdmin rule, you can attributed shares belonging to the administrator of this rule, as stated in my first post.

--

Trujilho