Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

José_Ramón_Veci's avatar
José_Ramón_Veci
Icon for Nimbostratus rankNimbostratus
Jun 10, 2019

User role for remote command

Hi all,    I'm trying to disable some members from a bash script in a remote server using a curl command   curl --insecure -u operator:operator -H "Content-Type: application/json" -X PUT http...
big-ip
devops
LTM
security
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jun 10, 2019

Hello Jose

I would repeat the query using GET to verify that your user can access in mode read-only to this resource. In case of no, you should validate your user permissions (user configuration).

Also, iControl REST uses RBAC.

https://devcentral.f5.com/s/articles/icontrol-rest-fine-grained-role-based-access-control-30773

Check the group assigned to your user and verify if it has access to the resource/method that you are using.

curl -k -u admin:XXX -X GET https://localhost/mgmt/shared/authz/roles | json-format
curl -k -u admin:XXX -X GET https://localhost/mgmt/shared/authz/resource-groups | json-format

KR,

Dario.