BIG-IQ: User Access Control only to Monitoring
Hi all, A customer here want to create a RBAC config so that users in a group only have the monitoring right for their objects. I tried to setup the following: User „user_monitoring“ created. User Group „GRP_MONITORING“ created -> Added User „user_monitoring“, Roles „MONITORING APM Viewer“, „MONITORING LTM Viewer“ Custom Resource Group „MONITORING“ -> Added all virtual-server and child objects who we want to see the monitoring and statistics. Custom Service Role „MONITORING APM Viewer“ -> Added Resource Group “MONITORING”, “GRP_MONITORING” Custom Service Role „MONITORING LTM Viewer“ -> Added Resource Group “MONITORING”, “GRP_MONITORING” I cannot find any resource or object for monitoring/statistics only. How should the customer proceed to create a monitoring only group? Thanks for help... Peter
vCMP, Partitions and managing self IP
Hi, Just reading vCMP for VIPRION Systems: Administration v13. I am a bit puzzled by description for creating self IPs Creating floating self IP addresses. Basically it describes that Partition assigned user (called customer administrator) is responsible for creating and managing Self IPs in his Partition. It seems to be mistake as in description of the task there is something like that: In the upper-right corner of any the BIG-IP Configuration utility screen, locate the Partition list and select the customer-specific administrative partition. If the partition selections are unavailable, you do not have a user role that allows you to change the current partition. An example of a selected partition is CustomerA_partition. How user assigned to specific partition (like Manager with Partition set to his Partition - not All) can switch Partitions? I was not able to configure user Role/Partition i a way that enables creating/editing Self IPs only for specific Partition - Am I missing something here? Piotr