Chapter 10 Setting Up and Managing Administrators and Policy
Administrator Accounts
10-2
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
About Administrator Accounts
Administrators are the only users of the Cisco Secure ACS HTML interface. To
access the Cisco Secure ACS HTML interface from a browser run elsewhere than
on the Cisco Secure ACS Windows server itself, you must log in to
Cisco Secure ACS using an administrative account. If your Cisco Secure ACS is
so configured, you may need to log in to Cisco Secure ACS even in a browser run
on the Cisco Secure ACS Windows server. For more information about automatic
local logins, see
Session Policy, page 10-16
.
Note
Cisco Secure ACS administrator accounts are unique to Cisco Secure ACS. They
are not related to other administrator accounts, such as Windows users with
administrator privileges.
In the HTML interface, an administrator can configure any of the features
provided in Cisco Secure ACS; however, the ability to access various parts of the
HTML interface can be limited by revoking privileges to those parts of the HTML
interface that a given administrator is not allowed to access.
For example, you may want to limit access to the Network Configuration section
of the HTML interface to administrators whose responsibilities include network
management. To do so, you would only select the Network Configuration
privilege for applicable administrator accounts. For more information about
administrator privileges, see
Administrator Privileges, page 10-3
.
Cisco Secure ACS administrator accounts have no correlation with
Cisco Secure ACS user accounts or username and password authentication.
Cisco Secure ACS stores accounts created for authentication of network service
requests and those created for Cisco Secure ACS administrative access in separate
internal databases.
