Forum Discussion

malek_133882's avatar
malek_133882
Icon for Nimbostratus rankNimbostratus
Sep 05, 2017

Challenge adding Difference of resource assign to different users not group after authintcating AAA (Radius)

Hello everybody,   in dead, I have a challenge for adding Difference of resource assign to different users not group after authenticating AAA (Radius).   my case is: i have different contracto...
BIG-IP Access Policy Manager (APM)
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Sep 05, 2017

Hi Malek,

 

in addition to what JTI has already explained (performing authorization within APM via the individual usernames), you could also implement custom Radius-Reply AV-pairs on your Radius Server Policies to reflect the users permissions / group memberships.

 

VPE will be able to read your custom AV-Pairs and enforce rules based on the provided information.

 

Cheers, Kai