Unable to authorize access FMC

[nethers]

I have problem with access to FMC using admin account, because accidentally disable Role administrator on external authentication tab, and now i can't access the gui on FMC, but i still can access the cli using admin

anyone here know how to enable administrator role from CLI?

regards

[balaji.bandi]

• The Firepower Management Center has a web interface and Linux shell for direct management of the device.

  • The Firepower Management Center supports two different internal admin users: one for the web interface, and another with shell access. These two admin users are different accounts and do not share the same password.

  • Firepower Management Center internal users added in the web interface other than admin have web interface access only.

  • You can grant shell access to Firepower Management Center external users.

  • On the Firepower Management Center when any account with shell access logs in to the management interface, it directly accesses the Linux shell.

here is the guide

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/user_accounts_for_management_access.html

[nethers]

Hi BB,

thanks for your answer,

in my case, i totally can't access the FMC web Interface because i click an option on disable administrator, on rule option (if im not wrong) and then i lost access to web Interface

is any way to active administrator for web Interface from CLI ?

[balaji.bandi]

Another suggestion from CLI you can create an another user with Admin full access with the below command :

> configure user add balajibandi config    <-- replace balajibandi with your name then login to web

[nethers · Accepted solution]

Hi BB,

this happen because the Administrator Role was disabled

i just solve the problem by editing the role from the CLI

root@firesenal:/var/log/httpd# eo_tool

?> use UserRole

edit 0 (the Role number ) its mean Administrator

$VAR1 = {
'description' => 'System-Provided',
'is_active' => 1, before is 0 (because disabled from System->Users->UserRole on FMC)
'is_assigned' => 1,
'key' => 'admin',
'name' => 'Administrator',

etc...

save the config and you have access to administrator on FMC via Web

hope this help others 

thanks for your help BB

regards

BMS