This document is not restricted to specific software and hardware versions.

Transcription

1 Contents Introduction Prerequisites Requirements Components Used User Group Permissions and Task Description Introduction This document is intended for Cisco Prime LAN Solution (LMS) administrators who want to preserve the user ID and privilege structures used when they converted to Prime Infrastructure. Prerequisites Requirements There are no specific requirements for this document. Components Used This document is not restricted to specific software and hardware versions. The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command. User Group Permissions and Task Description This table describes user group permissions and task descriptions. Task Group Name Task Name Description APIC-EM Controller Apic Global PnP Write Access Allows user to create or update the Apic Global PnP/Ztd settings APIC-EM Controller Apic Global PnP Read Access Allows user to read the Apic Global PnP settings APIC-EM Controller Apic Controller Read Access Allows user to read APIC-EM controller details APIC-EM Controller Apic Controller Write Access Allows user to create or update APIC-EM controller details Administration Menu Allows user to access all features under Administration Menu Access String Task Administration menu. Application Server Access Allows user to manage NAM server lists Allows user to create, modify, and delete Application and Services Access custom applications and services.

2 Allows user to create Assurance site Design Endpoint Site Association Access classification rules. Device Detail UDF Allows user to access Device details UD Allows user to access Import Policy Upd Export Audit Logs Access through Admin Mega menu. Allows user to view and System View Audit Logs Access audits. Allow user to manually download and im Import Policy Update the policy updates into the compliance a Audit manager engine Gives the user access to the Administrat Appliance Settings > Appliance menu. Allows user to modify Site Health Score Health Monitor Details definitions. Allows user to configure High Availability High Availability pairing primary and secondary servers. Allows user to access license center/sm License Center/Smart license license Gives access to the menu item which all Logging user to configure the logging levels for th product. Controls access to the screen to view th Scheduled Tasks and Data Collection background tasks. Controls access to the Administration > System Settings System Settings menu. Controls access to the Administration > U User Preferences Preference menu. Advanced search Allows user to define search criteria and Advanced search access access search results Alarm Browser String Alarm Browser Access Task Allows user to view alarms and events. Alerts and Events Troubleshoot Allows user to do basic troubleshooting, as traceroute and ping, on alarms. Alerts and Events Ack and Unack Alerts Allows user to acknowledge or unacknowledge existing alarms. Alerts and Events Delete and Clear Alerts Allows user to clear and delete active ala Alerts and Events Notification Allows user to configure notificatio forwarding. Alerts and Events View Alert condition Allows user to view a list of events and alarms. Alerts and Events Alarm Policies Edit Access Allows user to edit alarm policies. Alerts and Events Pick and Unpick Alerts Allows user to pick and unpick alerts Alerts and Events Alarm Policies Allows user to access alarm policies Configure Menu Configure Menu Access Allows user to access all features under String Task Feedback and Support Tasks Feedback and Support Tasks GLOBAL GLOBAL TAC Case Tool Automated Feedback LOBBY-AMBASSADOR-GLOBAL MONITOR-LITE-GLOBAL menu. Allows users to open a TAC case from w Prime Infrastructure. Allows access to automated feedback Allows user to log in with the Lobby Ambassador role. Allows user to log in with the Monitor Lite role.

3 Allows user to view and also manipulate Groups Add Group Members Allows user to add an entity, such as a d or port, to groups. Groups Add Groups Allows user to create groups. Groups Delete Group Members Allows user to remove members from gr Groups Delete Groups Allows user to delete groups. Groups Modify Groups Allows user to edit group attributes such name, parent, and rules. Groups Export Groups Allows user to export groups. Groups Import Groups Allows user to import groups. Guest User Tasks Configure Guest Users Allows user to create, edit, and delete gu user accounts. Guest User Tasks Lobby Ambassador Defaults Allows user to configure guest account defaults for a Lobby Ambassador accoun Guest User Tasks Lobby Ambassador User Preferences Allows user to set up Lobby Ambassado user preferences. Job Approve Job Allows user to submit a job for approval another user. Job Cancel Job Allows user to cancel the running jobs. Job Delete Job Allows user to delete jobs from job dashboard. Job Edit Job Allows user to edit jobs from job dashbo Job Pause Job Allows user to pause running and system jobs. Job Run Job Allows user to run paused jobs and sche jobs. Job Schedule Job Allows user to schedule jobs. Job System Jobs Tab Access Allows user to view System jobs. Job View Job Allows user to access the Administration Jobs menu Local Net User Tasks Configure Local Net Users Allows user to manage Local Net Users. Maps Client Location Allows user to view client locations on M Maps Maps Read Only Allows user to view the map in a read-on mode. Maps Maps Read Write elements within the maps such as AP placement. Maps Planning Mode Allows user to launch the planning mode Maps Rogue Location Allows user to view rogue AP locations o Map MDNS Policy Admin mdns Policy Admin Allows mdns Policy Admin user to log in the mdns portal. Monitor Menu String Allow user to access all features under t Monitor Menu Access Task Monitor menu. Allows user to add devices to Prime Add Device Access Infrastructure. Allows user to view the archived Config Archive Read Task configurations and schedule configuratio archive collection jobs. Allows user to perform all configuration Config Archive Read-Write Task archive operations. Delete Device Access Allows user to delete devices from Prime Deploy Configuring Access Infrastructure. Allows user to deploy and IWAN templates.

4 Design Template Access Device Bulk Import Access Device View configuration Access Edit Device Access Export Device Access TrustSec Readiness Assessment View Compute Devices Configure ACS View Servers Configure Access Points Configure Autonomous Access Point Templates Configure Choke Points Configure Config Groups Credential Profile Add_Edit Access Credential Profile Delete Access Configure Controllers Configure Ethernet Switch Ports Configure Ethernet Switches Migration Templates Configure ISE Servers Configure Lightweight Access Point Templates Configure Spectrum Experts Configure Mobility Devices Auto Provisioning Configure Switch Location Templates Allows user to create > Sh Policy Object templates and Configuratio Group templates. Allows user to perform bulk import of dev from CSV files. Allows user to configure devices in the Device Work Center. Allows user to edit device credentials an other device details. Allows user to export the list of devices, including credentials, as a CSV file. Access to the TrustSec menu which allo users to configure TrustSec in their netw Access to Data Center compute servers virtual elements such as Hosts and Virtu Machines managed in PI. Allows access to manage ACS View Ser Allows users to configure access points. Allows access to configure Autonomous Templates on Prime Infrastructure. Allows users to Configure Choke Points. Allows access to Config Groups. Allows user to Add and edit credential pr Allows user to delete credential profile Allows users to configure the Wireless Controller features. Controls access to the config ability whe viewing ethernet details in DWC for any device. Controls access to the config ability whe viewing ethernet details in DWC for any device. Allows user to create autonomous AP migration templates Allows users to manage ISE servers on Prime Infrastructure. Allows users to configure Lightweight Ac Point Templates on Prime Infrastructure Allows users to Configure Spectrum Exp Allows user to configure the CAS,WIPS,Mobile concierge service, loc analytics service, and provide the mobili procedures Allows access to auto provisioning Allow the user to modify templates

5 Discovery Discovery Configure Templates Configure Templates Configure Third Party Controllers and Access Point Configure WIPS Profiles Configure WiFi TDOA Receivers Device WorkCenter Global SSID Groups Scheduled Tasks Credential Profile View Access Templates Read Access WIPS Service Discovery CRUD Privilege Discovery Schedule Privilege Allow the user to do the CRUD operatio Feature Templates on DWC and configuration Template Allows user to create, read, delete, and update feature and configuration templa the Device Work Center. Allows users to configure Third Party Controllers and Access Points on Prime Infrastructure. Allows users to access WIPS Profiles. Allows users to configure WiFi TDOA Receivers. Allows user access to the Device Work Center. Allows users to configure Global SSID Groups. Allows user to create and schedule a configuration template,configuration group,software download task and temp Allows user to view credential profile Allows to access configuration templates read only mode Allows users to configure WIPS Service. Allows user to create, read, delete, and update Discovery Settings for both Quick Discovery and Advance Discovery. Allows user to schedule discovery of the network. Discovery Discovery View Privilege Allows user to view discovery settings. Monitoring Admin Dashboard Access Allows user to access the Admin Dashbo Monitoring Monitor Ethernet Switches Allows user to monitor ethernet interfaces,vlan switch port,and VLAN t of ethernet switches Allows user to monitor mobility group ev Monitoring Data Collection Access Allow user to access the Assurance Data Sources Monitoring Monitor Mobility Devices such as mobility statistics,mobility respo statistics,mobility initiator statistics Monitoring Deploy Monitoring Template Access Allow user to deploy monitoring template Allows user to identify the most used rule Monitoring Wireless Dashboard Access Allows user to view the wireless dashboa Monitoring Monitoring Policies troubleshoot a specific rule, and verify hi the selected rule Monitoring Design Monitoring Template Access Allow user to design monitoring template Monitoring Details Dashboard Access Allow user to access the Detail dashboa Monitoring Packet Capture Access Allow user to initiate packet captures on and supported routers. Monitoring Performance Dashboard Access Allow user to access the Performance dashboard. Monitoring Voice Diagnostics Allows users to access Voice Diagnostic information.

6 configuration information such as name, bandwidth,operational status,average pa Allows user to monitor controller security protection,rogue AP rules and guest us Allows users to launch the Topo Monitoring WAN Optimization Dashboard Access Allow user to access the WAN Optimizat dashboard. Monitoring WAN Optimization Multisegment Access Allow user to access the WAN Multisegm dashboard. Monitoring Ack and Unack Security Index Issues Allows users to Acknowledge or Unacknowledge Security Index Violation Allow user to monitor the media stream Monitoring Monitor Media Streams and end address,maximum size,rrc updates, priority and violation Monitoring Config Audit Dashboard Allows users to access Config Audit Dashboard. Monitoring Disable Clients Allows users to access Disabled Clients Monitoring Monitor Tags Allows user to monitor tags Monitoring Latest Config Audit Report Allows user to view the latest config aud reports Monitoring Identify Unknown Users Allows users to access Identify Unknown Users Monitoring Monitor Access Points Allows users to view Monitor Access Poi Monitoring Monitor Chokepoints Allows users to access Monitor Chokepo Monitoring Monitor Clients Allows users to access Monitor Clients p Monitoring Monitor Controllers Allows users to access Monitor Controlle Monitoring Monitor Interferers Allows users to access Monitor Interfere pages. Monitoring Monitor Spectrum Experts Allows users to access Monitoring Monitor WiFi TDOA Receivers Allows users to access Monitor WiFi TDO Receivers pages. Monitoring RRM Dashboard Allows users to access RRM Dashboard Monitoring Remove Clients Allows users to access Remove Clients Monitoring Monitor Security information such as RADIUS authentication,radius accounting,management frame Monitoring Track Clients Allows users to access Track Clients pag Monitoring View Security Index Issues Allows users to access Security Index Is Monitoring Monitor Third Party Controllers and Allows users to access Monitor Third Pa Access Point Controllers and Access Point pages. Monitoring Topology map and view the devices and links in th map. Allows user to read provisioned devices PnP Deploy History Read Access status. Allows user to read and delete operation PnP Deploy History Read-Write Access provisioned devices. Allows user to view Plug and Play PnP Preferences Read Access preferences.

7 Allows user to edit Plug and Play PnP Preferences Read-Write Access preferences. Allows user to view Plug and Play PnP Profile Deploy Read Access provisioning profiles. Allow user to create, modify, and delete PnP Profile Deploy Read-Write Access and Play provisioning profiles. PnP Profile Read Access Allow user to view Plug and Play profiles Allows user to set up configure the cisco WorkflowsReadWriteAccess switches and access devices Workflows Read-Write Access Allows uset to access PnP workflows. Allow user to create, delete, and modify PnP Profile Read-Write Access and Play profiles. Autonomous AP Read Only Allow user to view Autonomous AP Repo CleanAir Read Only Allow user to view CleanAir ContextAware Read Only Allows user to access ContextAware Re Client Read Only Allow user to view Client Context Aware Read Only Allows user to run context aware/location specific reports. Custom NetFlow Read Only Allow user to view custom NetFlow repo Custom NetFlow Allow user to access custom NetFlow re Device Read Only Allows user to read generated device rep Guest Read Only Allow user to view Guest. MSAP Read Only Allows user to run Mobile Concierge rep MSE Analytics Read Only Allows user to run Location Analytics rep Mesh Read Only Allow user to view Mesh. Summary Allows user to create and run network summary reports Summary Read Only Allows user to view all Summary reports Performance Read Only Allow user to view Performance reports. Raw NetFlow Read Only Allow user to view Raw NetFlow reports. Raw NetFlow Allow user to view NetFlow reports. Report Launch Pad Allow user to access the Report Run List Allow user to run reports. Saved List Read Only Allow user to view saved reports. Saved List Allow user to save reports. Compliance Read Only Allows user to configuration audit,networ discrepancy,pci DSS detailed and PCI D summary reports,psirt detailed and PS summary reports Allows user to customize the configuratio Compliance audit,network discrepancy,pci DSS det and PCI DSS summary reports,psirt detailed and PSIRT summary reports Security Read Only Allow user to create Security. Virtual Domains List Allow user to create the Virtual Domain related report Autonomous AP Allow user to create Autonomous AP Re CleanAir Allow user to create CleanAir Client Allow user to create Client Context Aware Allows user to run context aware/location specific reports. Voice Audit Report Allows user to check the controller

8 configuration and highlight audit violation Device Allow user to run reports specific to monitoring specific report related to Dev Guest Allow user to create Guest Identity Search Engine Allow user to create Identity Search Eng. MSAP Allows user to run Mobile Concierge rep MSE Analytics Allows user to run Location Analytics rep Mesh Allow user to create Mesh. Performance Allow user to view Performance reports. Report Run History Allow user to view report history. Security Allow user to view wireless security repo related to rogue APs, wips etc. Menu String Task Search Widget String Task Menu Access Search Access Swim Access Privilege Swim Collection Swim Delete Swim Distribution Swim Info Update Allow user to view the Report Allows user to search from the Header. U can either search for menu items and/or on the Prime Infrastructure server. * *Allows user to view and access Invent s. Allows user to collect images from differe locations such as from devices, from Cisco.com, or from URLs. Allows user to delete an image from the s page, except for image that are included in Plug and Play profile Allows users to upgrade and downgrade software versions to managed devices in network. * *Allows the user to edit and save image properties such as minimum RAM, minim FLASH and minimum boot ROM version Allows user to save preference options o s Allows user to recommend images from Cisco.com and from the local repository. Allows user to analyze software images Allows user to analyze software images Swim Preference Save Swim Recommondation Manage Protocol Allows user to manage protocol Add Allows user to add software Servers imagemanagement servers determine if the hardware upgrades (boo Swim Upgrade Analysis ROM, flash memory, RAM, and boot flas applicable) are required before performin software upgrade. Allows user to upgrade and downgrade Swim Activation software versions to managed devices in network determine if the hardware upgrades (boo Swim Upgrade Analysis ROM, flash memory, RAM, and boot flas applicable) are required before performin software upgrade. Software Updates Software Updates UBF Upload Allows the user to upload UBF patches.

9 UBF Upload Theme Changer Allows user to switch between the Conve Theme Changer Access Menu Item theme and the Classic View theme. Tools Menu String Provides easy access to commonly used Tools Menu Access Task troubleshooting and diagnostic pages. User Administration Audit Trails Allows user to access the Audit trails on login and logout. User Administration RADIUS Servers Allows user to access the RADIUS Serv menu User Administration SSO Server AAA Mode Allows user to access the AAA menu User Administration SSO Servers Allows user to access the SSO menu User Administration TACACS+ Servers Allows user to access the TACACS+ Se menu User Administration Users and Groups Allows user to access the Users and Gro menu User Administration Virtual Domain Allows user to access the Virtual Domain menu View Online Help OnlineHelp Allows user to access the Prime Infrastructure online help. Allows user to create devices, links and Topology Edit network in the topology map, edit the manually created link to assign the interf Monitoring Site Visibility Access Allows user to access site visibility. Monitoring PfR Monitoring Access Allows the user to access and view the P Monitoring page Monitoring Lync Monitoring Access Allows the user to access and view the L monitoring page Monitoring Incidents Alarms Events Access Allows user to access incidents alarms events Monitoring Service Health Access Allows the user to access and view the Service Health page Compliance Audit PAS Access Allows user to audit and view PSIRT and Center Tasks User Administration Center Tasks Compliance Audit Policy Access Compliance Audit Profile Access Compliance Audit Fix Access Allow report/dashlet use for users with only NBI Read access Custom Composite Report Virtual Elements Tab Access Manage and Monitor Servers Page Access EOX report Allows user to create, Modify and Delete Compliance Policy Allows user to create. Modify and Delete Compliance Profiles and Run Complianc Audit Allows user to access Compliance Audit Compliance Fix Job and Violations summ Enable this option for users with NBI Re access so they can generate reports and populate all dashlets. Allow user to create 'custom' report with or more (upto 5 reports ) existing report templates into a single report. When creating virtual domain or adding members to a virtual domain, allows use access the virtual elements tab, so as to allow user to add virtual elements (Datacenters, Clusters and Hosts) to virt domain Allows access to the Manage & Monitor Servers Page.

10 Center Tasks Product Usage privileges under Manage and Monitor Servers page Product Feedback Allows for administrative tasks such as Add/Delete/Edit/Activate and deactivate servers under M&M page Allows the user to access the Help Us Improve accoounts,and monitor status informatio Diagnostic Tasks Diagnostic Information Controls access to diagnostic page Global Variable Global Variable Access Allows user to access global variable. Mobility Services View CAS Notifications Only Allows user to view the CAS notifications Mobility Services Mobility Service Allows user to edit properties and parameters, view session and Trap destinations,manage user and group mobility services engine