Allowing specific user privileges

I don't think there is an LTM role which would allow a user to change just an iRule. You could build a simple iControl based application which would support changing just iRule(s).

 

 

Aaron

The closest you are going to get to what you need is an implementation of Administrative Domains and Partitions.

 

 

The User would still have a higher level of rights than what you want them to have, but they would be restricted to modifications of things within that Partition Only and not the entire F5 / LTM.

 

 

Another thing of note is that Nodes, iRules, Virtual Servers, and Pools are compartmentalized in an ADP implementation.

 

 

-Everything can use what is in the Common Partition

 

-Common Partition cannot use anything in any other partition

 

-Partitions cannot use any resources located in any different partition (other than Common).

 

Thanks guys, I had already used extensive partitioning, so maybe allowing him admin rights in his partition wouldn't be too bad, the only person he could mess up would be himself.

 

 

Thanks again,

 

 

Ken