Chapter 3 Configuring the Server
About Common Services Authentication
3-22
User Guide for CiscoWorks Common Services
78-16571-01
The CiscoWorks Server authentication scheme has five default roles. They are
listed here from the least privileged to most privileged:
•
Help Desk
Can access network status information only. Can access persisted data on the
system and cannot perform any action on a device or schedule a job which
will reach the network.
•
Approver
Can approve all tasks.
•
Network Operator
Can do all Help Desk tasks. Can do tasks related to network data collection.
Cannot do any task that requires write access on the network.
•
Network Administrator
Can do all Network Operators tasks. Can do tasks that result in a network
configuration change.
•
System Administrator.
Can perform all CiscoWorks system administration tasks.
If you configure Common Services to use Non-ACS for authentication,
authorization services are provided by CiscoWorks Server.
In Non-ACS mode, you cannot change the roles, or the privileges assigned to
these roles. However, a user can be assigned a combination of these roles. See
“Setting up Local Users” section on page 3-6
.
In ACS mode, you can create custom roles so that you can customize
Common Services client applications to best suit your business workflow and
needs.
That is, you can create a user, and assign the user with a set of privileges, that
would suit your needs. See
“Assigning Privileges in ACS” section on page 3-38
and
“Creating and Modifying Roles in ACS” section on page 3-39
sections for
details.
