LMS 4.1 assign multiple roles based on device group to a user?

[lisccwh]

Hello,

I'm wanting to assign various authorization rights to a local user id based on what device the user is looking at in CiscoWorks.

Example:

User A needs to have full admin rights on all WAN 891 routers, but limited (helpdesk) rights to LAN 6500 data closet switches and read only monitoring for core 6509 networking devices.

Is this possible?  If so, what steps do I take to achieve this?

Red would be read only, or monitoring.

Blue would be limited rights, such at troubleshooting and port configurations (not uplinks).

Green would be full admin rights (all 891 WAN routers).

-thanks

[yjdabear]

Looks possible, by configuring a Local User with Authorization Type "Enable Device Authorization", described at

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.1/user/guide/admin/security.html#wp1134895