For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Singh_74932's avatar
Singh_74932
Icon for Nimbostratus rankNimbostratus
Jun 12, 2008

Limited Access

Is it possible to provide a limited access to a user on LTM. For ex i want to provide application owner full access to there own application pool , they should be able to bring members down , enable , disable .. I think atleast i can make one EXe with icontrol with pool name / user / passwd hard coded and once u execute it u will get access to only that pool .. ?
management
monitoring

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 13, 2008
    In 9.4, there is role based administration You can create a partition and add users, pools, VIPs, etc to the partition. They wouldn't be able to modify objects outside their partition. For details you can check the System and Mgmt Guide:

     

     

    9.4.0-.1: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip9_4mgmt/BIG_IP_9_4_nsm_guide-06-1.html?sr=852408

     

    9.4.2+: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip_nsm_guide_943.pdf.html/BIG-IP_Network_and_System_Management_Guide.pdf

     

     

    Your suggestion of using an iControl application to allow specific functionality against specific a pool would be more granular and locked down.

     

     

    Aaron