Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi allI'm reading through the documentation and I don't see where it is possible to create new admin roles. I want to create new admin roles that only have permissions over a specific set of devices (ie, based in location -- I rather would prefer an ...
HiI still don't have access to ACS 5.4 I'm planning on how to do the policy rule.I would like that a given user could belong to several groups, my understanding is that ACS expects to only use ACS:CiscoSecure-Group-ID and that no other AVPs are suppo...
HiI'm trying to figure out if it is possible for the RSA Authentication Manager return attributes when the RSA Authentication manager is _not_ using an external directory (ie: LDAP, AD).Looking at this it is possible to receive attributes when the RS...
Many thanks for your reply Ageel!I think I didn't explain properly. I want to create restricted administrators in the ACS itself, not in the TACACS+ clients...Seems like the way for doing this would be to create a new admin role that can operate on a...
Got access to a Cisco press' AAA Identity management security and I found the answer myself. An additional external identity store needs to be used to retrieve attributes when using SecureID for authentication.