ADC

Restricted system user authentication to NetScaler management interfaces

May 2, 2023

Contributed by:

S C

You can restrict system user access to specific NetScaler management interfaces such as CLI or API. The allowedManagementInterface parameter defines the list of permitted management interfaces. For example, if the management interface for a user or a group is set to API, all users in the group can access NetScaler through API and not through CLI. However, the NetScaler GUI is part of the API interface and users with API permission can also access the GUI interface.

Note:

By default, users and groups have access to all interfaces (CLI, API, and the GUI).

You can configure the parameter either at the user level or at the user group level. When you configure at the group level, the configuration is applied across all user accounts in the group. If a user is bound to multiple groups, the appliance allows access to an aggregated set of management interfaces. You can specify settings for a user in a group by configuring the parameter at user level. In this case – user level setting is configured for a group. In certain scenarios, when the customer is using an external authentication server for managing user accounts, the server details are configured on the appliance. In this case, the administrator can create a user group in the NetScaler appliance and add all users (grouped in the external server) to the group. For example, all users managed in the external server are added to the API_users group and the admin can configure the group locally on the appliance.

Note:

The NetScaler appliance allows only nsroot administrator (superuser) to configure the parameter and does not allow any system user to change the parameter setting.

Configure user access to NetScaler management interfaces by using the CLI

To allow user access to a specific management interface, you must set the allowed management interface parameter. At the command prompt, type:

set system group <groupName> [-allowedManagementInterface ( CLI | API )]

Example:

set system group network_usergroup –allowedManagementInterface CLI

For parameter description, see Authentication and authorization command reference topic.

To know about GUI and CLI interfaces, see Access NetScaler topic.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Restricted system user authentication to NetScaler management interfaces

May 2, 2023

Contributed by:

S C

May 2, 2023

Contributed by:

S C

Restricted system user authentication to NetScaler management interfaces

Configure user access to NetScaler management interfaces by using the CLI

In this article