F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Rupesh_M's avatar
Rupesh_M
Icon for Nimbostratus rankNimbostratus
Dec 31, 2013

Role wise access for different partition

Hi,

 

We are planning to deploy F5 4000 appliance which will be logically isolated with four partition assosiated with four route domains. For management purpose, differnt teams will have access to these four partition. We have AD, TACACS in place which can be used for remote user authentication. Query- 1)Is it possible to allow management access for different groups to different partition? 2)And granular level access to individual partition. {e.g. Access for partition-A to different groups (defined in AD or TACACS) with differnet level of privilages} ?

 

BIG-IP Access Policy Manager (APM)
deployment
design
management
security

1 Reply

  • Pragathishakart's avatar
    Pragathishakart
    Icon for Nimbostratus rankNimbostratus
    Jan 08, 2014

    We can provide the granular access to the partitions based on the role specified to the user groups. If a user has the privilege in a particular partition can modify or can not modify based on the privilege associated with the user role. Please refer the below links for more clarity.

     

    Managing user accounts: http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos_management_guide_10_1/tmos_users.html

     

    Authentication: http://support.f5.com/kb/en-us/solutions/public/14000/300/sol14324.html

     

    Configuring Remote User Authentication and Authorization: http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/tmos-implementations-11-1-0/16.html