Forum Discussion
gaspol33_275602
Nimbostratus
NimbostratusUser Roles in BIG-IQ
Is there a way to create custom role types in BIG-IQ? For example, I'd like to create a role which allows a user to manage pools, virtual servers, and SSL certificates in BIG-IP. Can this be done? Fr...
Currently, you are correct on the roles you can create. It is also important to note that you can apply multiple roles to a single user or user group. We do not currently have a role specific to managing certificates, but we do have roles that cover virtual server enable/disable, as well as pool member enable/disable.
Can you describe the roles you are looking for in detail, including what you expect that user to be able to do/see?
We are in the process of scoping additional changes to the RBAC in BIG-IQ and the more customer details/stories we can include the better.
M_G1Nimbostratus
NimbostratusOn top of SSL cert management, being able to have a role that lets a user only edit a single external data group file would be great.
We use this use for our site maintenance mode control file. Works great but requires one of our network admins to make the change as our developers do not have access to the F5. Ideally, they would be able to make the changes themselves without being exposed to anything else in the interface.