Jump to content
Welcome to our new Citrix community!

Can you create a User Group which limits the Services seen and managable?


Recommended Posts

I'd like to allow a group of web admins to be able to enable/disable their own servers.

I see the pre-made user group "operators" which appears to allow enabling and disabling

of services and saving config. That might have to do. But it would be even better if 

I could restrict which services could be seen by a particular user group. Any way

to do that?

Link to comment
Share on other sites

Unfortunately, if you filter the show command by name, the GUI won't load any object, So you have to allow the show for all objects in a given node. But you can limit the edit actions by naming convention.

 

Default operator policy:

(^man.*)|(^show\s+(?!system)(?!ns ns\.conf)(?!ns runningConfig)(?!gslb runningConfig)(?!audit messages).*)|(^stat.*)|(^set.*-accessdown.*)|(^(enable|disable) (server|service).*)
 

Custom operator policy to see all, and limit edits to certain named objects:

(^man.*)|(^show\s+(?!system)(?!ns ns\.conf)(?!ns runningConfig)(?!gslb runningConfig)(?!audit messages).*)|(^stat.*)|(^set.*-accessdown.*)|(^(enable|disable) (server|service) appNameA.*)
 

Depending on your naming convention options.

 

 

 

  • Like 3
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...