Application Delivery Management

Configure access policies

March 11, 2024

Contributed by:

R C

Access policies define permissions. A policy can be applied to a single user or group, or to multiple users and multiple groups. NetScaler Application Delivery Management (ADM) provides four predefined access policies:

adminpolicy. Grants access all NetScaler ADM features. The user has both view and edit permissions, can view all NetScaler ADM content, and can perform all edit operations. That is, the user can perform add, modify, and delete operations on the resources.
readonlypolicy. Grants read-only permissions. The user can view all content on NetScaler ADM, but is not authorized to perform any operations.
appAdminPolicy. Grants administrative permissions for accessing the application features in NetScaler ADM. A user bound to this policy can add, modify, and delete custom applications, and can enable or disable the services, service groups, and the various virtual servers, such as content switching, cache redirection, and HAProxy virtual servers.
appReadOnlyPolicy. Grants read-only permission for application features. A user bound to this policy can view the applications, but cannot perform any add, modify, or delete, enable, or disable operations.

Note:

The predefined policies cannot be edited.

You can also create your own (user-defined) policies.

To create user-define access policies:

In NetScaler ADM, navigate to Settings > Users & Roles > Access Policies.
Click Add.
In the Policy Name field, enter the name of the policy, and enter the description in the Policy Description field.

The Permissions section lists of all NetScaler ADM features, with options for specifying read-only, enable-disable, or edit access.
Click the (+) icon to expand each feature group into multiple features.
1. Select the permission check box next to the feature name to grant permissions to the users.
  - View: This option allows the user to view the feature in NetScaler ADM.
  - Enable-Disable: This option is available only for the Network Functions features that allow enable or disable action on NetScaler ADM. User can enable or disable the feature. And, user can also perform the Poll Now action.
    
    When you grant the Enable-Disable permission to a user, the View permission is also granted. You cannot deselect this option.
  - Edit: This option grants the full access to the user. User can modify the feature and its functions.
    
    If you grant the Edit permission, both View and Enable-Disable permissions are granted. You cannot deselect the auto-selected options.
  If you select the feature check box, it selects all the permissions for the feature.
Note:

Expand Load Balancing and GSLB to view more configuration options.

In the following image, the configuration options of the Load Balancing feature have different permissions:

The View permission is granted to a user for the Virtual Servers feature. User can view the load balancing virtual servers in NetScaler ADM. To view virtual servers, navigate to Infrastructure > Network Functions > Load Balancing and select the Virtual Servers tab.

The Enable-Disable permission is granted to a user for the Services feature. This permission also grants the View permission. User can enable or disable the services bound to a load balancing virtual server. Also, user can perform Poll Now action on services. To enable or disable services, navigate to Infrastructure > Network Functions > Load Balancing and select the Services tab.
Note:

If a user has the Enable-Disable permission, the enable or disable action on a service is restricted in the following page:
1. Navigate to Infrastructure > Network Functions.
2. Select a virtual server and click Configure.
3. Select the Load Balancing Virtual Server Service Binding page. This page displays an error message if you select Enable or Disable.
The Edit permission is granted to a user for the Service Groups feature. This permission grants the full access where View and Enable-Disable permissions are granted. User can modify the service groups that are bound to a load balancing virtual server. To edit service groups, navigate to Infrastructure > Network Functions > Load Balancing and select the Service Groups tab.
Click Create.

Grant StyleBook permissions to users

You can create an access policy to grant StyleBook permissions such as import, delete, download, and more.

Note:

The View permission is automatically enabled when you grant other StyleBook permissions.

Grant StyleBook permissions to user

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configure access policies

March 11, 2024

Contributed by:

R C

March 11, 2024

Contributed by:

R C

Configure access policies

Grant StyleBook permissions to users

In this article