Cisco TelePresence Administrator's Manual page 269

User accounts
Field Description
Access The access level given to members of the
level administrator group:
Read-write: allows all configuration information to be
viewed and changed. This provides the same rights as
the default admin account.
Read-only: allows status and configuration information
to be viewed only and not changed. Some pages, such
as the Upgrade
accounts.
Auditor: allows access to the
Log, Network Log,
None: no access is allowed.
Default: Read-write
Web Determines whether members of this group are
access allowed to log in to the system using the web interface.
Default: Yes
API Determines whether members of this group are
access allowed to access the system's status and
configuration using the Application Programming
Interface (API).
Default: Yes
State Indicates if the group is enabled or disabled. Access
will be denied to members of disabled groups.
Determining the access level for accounts that belong in multiple groups
If an administrator account belongs to more than one administrator group, the effective settings for Access
level, Web access and API access will be the highest of each group to which the account belongs. Any
groups in a disabled state are ignored.
For example, if the following groups were configured:
Group name Access level
Administrators Read-write
Region A Read-only
Region B Read-only
Region C Read-only
the following table shows examples of the access permissions that would be granted for accounts that
belong in one or more of those groups:
Groups belonged to
Administrators and Region A
Cisco VCS Administrator Guide (X8.1.1)
page, are blocked to read-only
Event Log, Configuration
Alarms and Overview
Web access
-
Yes
-
Yes
Access permissions granted
read-write access to the web interface but no API access
Configuring remote account authentication using LDAP
Usage tips
If an administrator belongs to more than one
group, it is assigned the highest level
permission for each of the access settings
across all of the groups to which it belongs
(any groups in a disabled state are ignored).
See Determining the access level for
accounts that belong in multiple groups
[p.269] below for more information.
pages only .
This controls access to the XML and REST
APIs by systems such as Cisco TMS.
If an administrator account belongs to more
than one administrator group with a
combination of both Enabled and Disabled
states, their access will be Enabled.
API access
-
-
Yes
Yes
Page 269 of 507