Network Management Card 2 (NMC2) v6.X.X and 3 (NMC3) User Types and Permissions Definitions
Issue
What new user types and permissions are available within Network Management Card 2 (NMC2) AOS v6.X.X and on all Network Management Card 3 (NMC3)?
Product Line / Environment:
- Network Management Card 2 (NMC2) - AP9630/AP9630CH, AP9631/AP9631CH, AP9635/AP9635CH
- Network Management Card 3 (NMC3) - AP9640, AP9641, AP9544, AP9547
Cause:
NMC with firmware v6.0.6 to higher AOS versions and on all NMC3 firmware revisions will contain these user types that is defined by permissions. This article is intended to highlight each and define their respective permissions.
Along with new user types, multiple users of each type can be created and logged in to an NMC2 or an NMC3 at the same time. If more than 20 users are going to be used on a system, it would be recommended to instead use some form of centralized user management, such as RADIUS that will be available for NMC2 and NMC3.
Resolution
Refer to the information below. regarding the types of users that can be created.
- Super User (NEW!) - The super user has full control of the NMC2. This user cannot be renamed, locked, or deleted. It can, however, be disabled.
- Administrator - An administrator has full control of the NMC2. A super user or administrator can manage another Administrator's account (enable, disable, change password, etc).
- Device - A device user has read-write access to the device-related menus only. The super user or an administrator can create, delete, enable, or disable a device user account.
- Read-only - A read-only user account has read-only access to view status but not to control a device or change any configured value. The super user or an administrator can create, delete, enable, or disable a read-only user account.
- Network-only (NEW!) - A network-only user has access to the Home page of the web interface and only network-specific elements only including the Status->Network page within the web UI and various network-specific CLI commands.
- Application specific - (i.e. Outlet user), if supported. - Certain applications may allow certain user types that have different permissions relating to device control. For example, on a Switched Rack PDU, an outlet user could be created and given access to control certain outlets.
NOTE for NMC2 based units: If you upgrade your NMC2 firmware from v5.1.X to v6.X.X, as noted in knowledge base article ID FA167693, your 5.1.X users (administrator, device, read-only) will transfer over to the new updated firmware.
NOTE for NMC3 based units: As the free NMC3 firmware version 1.X.X.X onwards grants the same local user authentications discussed in this article and RADIUS, end users can also take advantage of remote authentications such as LDAP, TACACS+. These are available on the NMC3 licensed firmware 3.2.X.X onwards.
To get the licensed 3.X.X.X firmware, you need to use the Secure NMC System Tool to update your Network Management Card. Below are the options you can use:
For information regarding the addition of these new user types in bulk or via command line, please refer to knowledge base FA176542.
If you have any clarifications, please feel free to contact us at 1-800-800-4272 or chat with our technical support representatives.