Packet tracer on ASA for specific users (RBAC)

[dirksmit]

Hi All,
Wondering if this is possible. I want to create a user account on an ASA running 9.12(4) that just has the ability to use the packet tracer tool via ASDM. As a administrator I get requests about traffic beiing allowed through the firewall and my goal in this is to let specific users do this themself.

[Cisco_Virtual_Engineer]

Based on the information I found, it appears there isn't a specific method or detailed guide available to create a user account on a Cisco ASA running 9.12(4) with the sole ability to use the Packet Tracer tool via ASDM. You can create a user account and manage user privileges, but it seems that allowing a user to only use the Packet Tracer tool and nothing else might not be possible.

To create a user account, you can follow these general steps:

1. Open ASDM and connect to the ASA device.
2. Navigate to Configuration ) Device Management ) Users/AAA ) User Accounts.
3. Click the "Add" button to create a new user account.
4. Enter the username, password, and other required information for the user account.
5. Specify the desired privilege level and any additional settings.
6. Click "Apply" to save the user account configuration.

For the user to use the Packet Tracer tool via ASDM, ASDM access is required to be enabled on the ASA. However, you must be aware that by enabling ASDM access, the user would also have access to other tools and settings on the ASDM, not just the Packet Tracer tool.

For further specific details and procedures, I recommend reviewing the official Cisco ASA configuration guides or reaching out directly to Cisco support.