Product Documentation
NetScaler Console service
View PDF

How to assign more permissions to delegated admin users

January 8, 2024
Contributed by: 
C

When the first user of your organization signs up and logs on to NetScaler Console, this user is assigned the super admin privileges. Every subsequent user that logs on is assigned a delegated admin role by default. A delegated admin does not have the permission to view and perform any tasks related to user administration or RBAC settings.

However, you can assign super admin privileges or specific non-super admin roles to a delegated admin so that the admin is able to perform tasks related to user administration.

For detailed information about role-based access control see Configuring Role-Based Access Control.

Assigning Super Admin Permissions to a Delegated Admin

To assign super admin permissions to a delegated admin, a super admin has to assign the default admin group to a delegated admin user. Perform the following tasks:

  1. Log on to NetScaler Console as the super admin.
  2. Navigate to Account > User Administration > Users.
  3. Select the user name of the delegated admin and click Edit.

  4. Assign the group <tenant_name>_admin_group to the delegated admin and click OK. For example, in the following image, “example_admin_group” is assigned to a delegated admin user.

    Delegated admin user

Assigning Custom Role to a Delegated Admin

To assign any custom role to a delegated admin, the super admin has to create a group, role, and policy and assign to the delegated admin user. This ensures that the delegated admin has only the required permissions. Perform the following tasks:

  1. Log on to NetScaler Console as the super admin.

  2. Navigate to Account > User Administration > Access Policies. Select Add to create an access policy with the required permissions for the delegated admin. In this example, an access policy custompolicy is created that allows view access to User Administration settings.

    Access Policies

  3. Navigate to Account > User Administration > Roles. Select Add to create a role and bind this role to the access policy that you created in the previous step. In this example, a role customrole is created and bound to the custompolicy access policy.

    Create roles

  4. Navigate to Account > User Administration > Groups. Select Add to create a group and bind this group to the role you created in the previous step. In this example, the group “custom group” is created and bound to the role “custom role.”

    Create system group

  5. Navigate to Account > User Administration > Users

  6. Select the user name of the delegated admin and click Edit.

  7. Assign the group you created in the previous step to the delegated admin user. In this example, the delegated admin user is assigned the group customgroup.

    Configure system user

How to assign more permissions to delegated admin users
January 8, 2024
Contributed by: 
C
January 8, 2024
Contributed by: 
C

In this article

Site feedback | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.