For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

José_Ramón_Veci's avatar
José_Ramón_Veci
Icon for Nimbostratus rankNimbostratus
Jun 10, 2019

User role for remote command

Hi all,    I'm trying to disable some members from a bash script in a remote server using a curl command   curl --insecure -u operator:operator -H "Content-Type: application/json" -X PUT http...
BIG-IP
devops
LTM
security
Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Jun 10, 2019

Hello Jose

I would repeat the query using GET to verify that your user can access in mode read-only to this resource. In case of no, you should validate your user permissions (user configuration).

Also, iControl REST uses RBAC.

https://devcentral.f5.com/s/articles/icontrol-rest-fine-grained-role-based-access-control-30773

Check the group assigned to your user and verify if it has access to the resource/method that you are using.

curl -k -u admin:XXX -X GET https://localhost/mgmt/shared/authz/roles | json-format
curl -k -u admin:XXX -X GET https://localhost/mgmt/shared/authz/resource-groups | json-format

KR,

Dario.