For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

xMadi's avatar
xMadi
Icon for Nimbostratus rankNimbostratus
Jan 27, 2017

Restricting account access to specific objects

Is there a way other than using partitions to restrict user access just to specific objects (pools,virtual servers, wide IPs) ?  
iControlREST
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Jan 27, 2017

There are multiple type of users, maybe one of the predefined has what you are looking for. I don't think you can select individual object types (as you said, excluding partitions), must be something related with the modules (like LTM).

 

This is the documentation about user accounts in v12:

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-user-account-administration-12-0-0.html

 

This is the section that has the user roles available in v12:

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-user-account-administration-12-0-0/4.htmlreferenceid