Cisco LMS 4.2 Authorization with Local RBAC Configurations is needed.

[Muhannad Abu Shamma]

Dear Team,

I need your help with Cisco LMS authorization roles (RBAC), I am trying to make the following 2 points and none of them is working as expected:

• In the compliance roles, I am trying disable the violations fix for some users, I have the option to disable it but it didn’t work unless I have disabled the “Netconfig” for the user, so I am wondering if there is any way to disable the compliance violations fix without disabling the Netconfig (Create/delete) role.
• I am wondering if there is any way to stop some users from deleting the JOB after they run it, for example: I want a certain user to be able to create a Netconfig JOB and he can deploy it but I don’t want him to delete the JOB after he finish so I can check if someone deploy a wrong configurations.

Your support will be appreciated.

Regards,

Muhannad

[Muhannad Abu Shamma]

Dears,

Any help will be appreciated.

Thanks,

Muhannad

[AFROJ AHMAD]

Hi Muhannad,

For the first :Did you tried for different user ? if it is happening for all the user then it should be an expected behavior ,however share the screen shot for the same

For the second::yes you can stop any user from deleting \stopping the \browsing the job.check the attached screen shot.

Thanks-

Afroz

**Ratings Encourages Contributors **

[Muhannad Abu Shamma]

Dear Afroz,

Many thanks for your feedback.

Yes, i have tried to 2 users with the same results, kindly check the attached screen shots, when i am trying to disable the compliance profile fix violation job, it will never disable the violation fix jobs for the user unless i disable the netconfig create/configure/deployment job.

This is weird because i don't know why they are related and why the fix violation dont stop the compliance job and why it is related to a Netconfig job.

For the second point, i didn't find the attachment, can you please post it again if there is a way to stop the user from deleting a job and still the same user have the permission to create Netconfig JOB.

Thanks,

Muhannad

[AFROJ AHMAD]

Hi Muhannad,

do you have a valid PI-CM license  ?

check the attached screen shot .sry missed in my last post  .

Thanks-

Afroz

****Ratings Encourages Contributors ***

[Muhannad Abu Shamma]

Hi Afroz,

Yes i have a valid PI-CM license.

Do you have any clue what is going on and why i am unable to stop the permission of the Compliance fix violation job?

Regards,

Muhannad