Application Delivery Management

Manage admin partitions of NetScaler instances

March 11, 2024

Contributed by:

R C C

You can configure admin partitions on your Citrix Application Delivery Controller (ADC) instances so that different groups in your organization are assigned different partitions on the same NetScaler instance. A network administrator can be assigned to manage multiple partitions on multiple NetScaler instances.

NetScaler Application Delivery Management (ADM) provides a seamless way of managing all partitions owned by an administrator from a single console. You can manage these partitions without disrupting other partition configurations.

To allow multiple users to manage different admin partitions, you have to create groups and then, assign users and partitions to those groups. Each user can view and manage only the partitions in the group to which the user belongs. Each admin partition is considered as an instance in NetScaler ADM. When you discover a NetScaler instance, the admin partitions configured on that NetScaler instance get added to the system automatically.

Consider that you have two NetScaler VPX instances with two partitions configured on each instance. For example, NetScaler instance 10.102.216.49 has Partition_1, Partition_2, and Partition_3, and NetScaler instance 10.102.29.120 has p1 and p2 as shown in the following image.

To view the partitions, navigate to Infrastructure > Instances > NetScaler > VPX, and then click Partitions.

You can assign user-p1 the following partitions: 10.102.29.120-p1 and 10.102.216.49-Partition_1. And, you can assign user-p2 to manage partitions 10.102.29.80-p2, 10.102.216.49-Partition_2, and 10.102.216.49-Partition_3.

Then , you have to create the two users, user-p1 and user-p2, and you have to assign the users to the groups that you created for them.

First, you have to create two groups with appropriate permissions (example: admin permissions) and include the required admin partition instances in each group. For example, create system group partition1-admin and add NetScaler admin partitions 10.102.29.120-p1 and 10.102.216.49-Partition_1 to this group. Also create system group partition2-admin and add NetScaler admin partitions 10.102.29.120-p2, 10.102.216.49-Partition_2, and 10.102.216.49-Partition_3 and to this group.

After you have created the admin partition, you can also use the revision history difference feature and the audit template for admin partition feature for auditing purposes

Revision history difference for admin partition allows you to view the difference between the five latest configuration files for a partitioned NetScaler instance. You can compare the configurations files against each other (example Configuration Revision - 1 with Configuration Revision -2) or against the current running/saved configuration with Configuration Revision. Along with the differences in configuration, the correction configurations are also shown. You can export all the corrective commands to your local folder and correct the configurations.

To view the revision history difference:

Navigate to Infrastructure > Configuration Audit. Click inside the donut chart that represents the instance config status. In the Audit Reports page that opens, click the partitioned NetScaler instance.
From the Action menu, click Revision History Diff.
On the Revision History Diff page, select the files that you want to compare. For example, compare the Saved Configuration with Configuration Revision -1 and then, click Show configuration difference.
You can then view the difference between the five latest configuration files for the selected partitioned NetScaler instance as shown below. You can also view the corrective configuration commands and export these corrective commands to your local folder. These corrective commands are the commands that need to be run on the base file in order to get the configuration to the desired state (configuration file that is being used for comparison).

Audit templates for partition allow you to create a custom configuration template and associate it with a partition instance. Any variation in the running configuration of the instance with the audit template is shown in the Template vs Running diff column of the Audit Reports page. Along with the differences in configuration, the correction configurations are also shown. You can also export all the corrective commands to your local folder and correct the configurations.

To view the template vs running difference:

From the Audit Reports page, click the partitioned NetScaler instance.
If there is any difference between the audit template and the running difference, the difference is shown as a hyperlink. Click the hyperlink to view the differences if there is any. Along with the differences in configuration, the correction configurations are also shown. You can also export all the corrective commands to your local folder and correct the configurations.

To create groups:

Navigate to Settings > User Administration > Groups, and then click Add.
In the Create System User page, specify the following:
- Group Settings tab: Enter the group name and role permissions. To allow access to specific instances, clear the All Instances check box, and then choose your instances on the Select Instances page.
- Applications and Templates tab: You can choose to use this group across all applications and configuration templates.
- Select Users tab: Select users that you’d like to add to this group. You can click the New link in the Available table to create new users. Optionally, configure the session timeout, where you can configure the time period for how long a user can remain active.
Click Finish.

To create users:

Navigate to Settings > User Administration > Users, and then click Add.
On the Create System User page, specify the user name and password. Optionally, you can enable external authentication and configure the session timeout.
Assign the user to a group by adding the group name from the Available list to the Configured list.
Click Create.

Now log out and log on with user-p1 credentials. You can view and manage only the admin partitions assigned to you to manage and monitor.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Manage admin partitions of NetScaler instances

March 11, 2024

Contributed by:

R C C

March 11, 2024

Contributed by:

R C C

Manage admin partitions of NetScaler instances

In this article