ASDM levels of access

[whanson]

I know in the cli I can put different commands in different privilege classes but is there a way to accomplish the same thing in ASDM so say an ASDM user can see things but not alter.  thx again

[mirober2]

Hello,

Yes, this is all handled under the Configuration > Device Management > Users/AAA > AAA Access > Authorization section.

Here is the ASDM configuration guide for this, which should get you started:

http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/configuration_guide/access_management.html#wp1145571

Let us know if you have any questions about the configuration.

-Mike

[whanson]

Thanks as always but just want to make sure that ASDM can be restricted based on local user and doesn't require RADIUS.

Bill

[mirober2]

Hi Bill,

Yes, it does support using the LOCAL database and does not require RADIUS. When you enable command authorization, just select LOCAL from the service group drop-down menu and it will check the privilege level against the local user database.

Hope that helps.

-Mike

[whanson]

Thanks again