Security Policies; Superuser Privileges For Provisioning Users - Cisco 15454-DS1-14= - 1.544Mbps Expansion Module Reference Manual

9.2.2 Security Policies

Table 9-2 ONS 15454 Security Levels—Network View (continued)
CTC Tab Subtab
Provisioning Security
Alarm Profiles
BLSR
Overhead Circuits
Provisionable
Patchcords (PPC)
Server Trails
VLAN DB Profile
Maintenance Software
Diagnostic
APC
1. X indicates that the user can perform the actions.
2. — indicates that the privilege to perform an action is not available to the user.
3. The action buttons in the subtab are active for all users, but the actions can be completely performed only by the users with the required security levels.
9.2.2 Security Policies
Users with Superuser security privileges can provision security policies on the ONS 15454. These
security policies include idle user timeouts, password changes, password aging, and user lockout
parameters. In addition, a Superuser can access the ONS 15454 through the TCC2/TCC2P RJ-45 port,
the backplane LAN connection, or both. If enabled in the NE defaults, superusers can be configured to
override the inactive user timeout interval.

9.2.2.1 Superuser Privileges for Provisioning Users

Superusers can grant permission to Provisioning users to retrieve audit logs, restore databases, clear
performance monitoring (PM) parameters, activate software loads, and revert software loads. These
privileges can only be set using CTC network element (NE) defaults, except the PM clearing privilege,
which can be granted to a Provisioning user using the CTC Provisioning> Security > Access tabs. For
more information about setting up Superuser privileges, refer to the Cisco ONS 15454 Procedure Guide.
Cisco ONS 15454 Reference Manual, R8.5
9-6
[Subtab]: Actions
Users: Create/Delete
Users: Edit
Active logins:
Logout/Retrieve Last Activity
Time
Policy: Change
3
Store/Delete
New/Load/Compare/
Available/Usage
Create/Delete/Edit/Upgrade
Create/Delete/Edit/Merge
Search
Create/Edit/Delete
Create/Edit/Delete
Load/Store/Merge/Circuits
Download/Cancel
OSPF Node Information:
Retrieve/Clear
Run APC/Disable APC
Refresh
Retrieve Maintenance Provisioning
— —
Same user Same user
— —
— —
— —
X X
— —
— —
X X
— —
— —
X X
— X
X X
— —
X X
Chapter 9 Security
Superuser
— X
Same user All users
— X
— X
X X
X X
X X
X X
X X
X X
X X
X X
X X
X X
— X
X X
78-18106-01