Forum Discussion
Brad_Mc_115066
Nimbostratus
NimbostratusUser and Partition Access Query
Hi All,
Is there a way, using TACACS and remote roles that I can assign access to a user to two or more partitions, but not all of them?
Scenario is: I have a TACACS server returning the a...
R_MarcNimbostratus
NimbostratusI haven't tested this (I don't use partitions) but RBAC on BigIPs is pretty limited in my experience. I think it just matches on it's first find, in order and the partition access is defined in the role (all or specific). With Radius you could probably deal with your requirement, but with LDAP and TACACS I don't think so. To deal with in in radius, I think you could use a realm, where the user logs in to a realm to identify which partition they intend to connect too. They wouldn't be able to switch between, in session.
This is all speculation on my part, however.
