WLC

[mukeshcu1]

Hi,

We are using Cisco WLC. I want to give delegation of WLC, Like adding mac address,user creation etc to my L1 team.. Is there any way for achieving this..

Thanks in advance..

[Scott Fella]

The only other way is to create a lobby ambassador account, but you need to know what they can do and can't.  

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70/c70users.html#wp1048412

You can also use radius or tacacs if you have it to limit what tabs on the GUI a user can have access to.

https://supportforums.cisco.com/document/57301/wlc-and-acs-5x-tacacs-configuration-example-web-authentication

Scott

[mukeshcu1]

Hello Scott,

Thanks for revert.

I have gone through the link which you provided but its not mentioned anywhere, How to limit the GUI interface tab..

I have created the lobby ambassador account and i can only get the option for adding / deleting guest account..Please help how can i assign other privileges like mac filtering, health monitoring etc.

[Scott Fella · Accepted solution]

You can use roles if using TACACS:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-5/config_guide/b_cg75/b_cg75_chapter_0101001.html

You can't specify what they can and can't do though. You limit what tabs on the GUI they can access. 

Scott

[mukeshcu1]

Thanks Scott.

[Abha Jha]

You may select the following roles using TACACS :-

MONITOR, WLAN, CONTROLLER, WIRELESS, SECURITY, MANAGEMENT, COMMANDS, ALL, and LOBBY. The first seven correspond to the menu options on the controller GUI and allow access to those particular controller features. If a user is not entitled for a particular task, the user is still allowed to access that task in read-only mode. You can enter one or multiple roles, depending on the group's needs. Use ALL to specify all seven roles or LOBBY to specify the lobby ambassador role.