Ciscoworks Job Approval Security

I am working with a customer on enhancing the security around their device administration practices.  They have Ciscoworks deployed and are using it, but have no approval processes in pace for the activities undertaken, and Audit has picked up on this.
I have found that the Ciscoworks product provides workflow and approval processes for scheduled jobs.  I have suggested the customer implement this but their response is "But I can edit the job after approval, so the approval process is ineffective".
I have been trying to determine if this statement is correct or not.  Can a job be edited after approval without it needing to be reapproved?
Secondly, the documentation states that jobs scheduled to run immediately do not need approval.  Is it possible to stop jobs being run immediately?  If not is there a special report that can be generated for jobs run immediately.
Finally, does the modification of the baseline configuration templates require approval if this is activated, as this was suggested as another means of by passing the approval process.
I have tried reading the documentation on these questions http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/jobmgt.html
but not surprisingly I cannot see any reference to the detailed questions above.
Sorry I do not have version numbers of the installed product available.
thank you for any assistance offered

This is not possible.  The approver feature of RME requires email addresses for the approvers.

Similar Messages

  • Prime Infrastructure 2.0 Job Approval notifications?

    I have a question about notification for job approvers in Prime 2.0.  I'm trying to setup PI such that a restricted user can create a configuration change on a wireless controller and submit it for approval by the PI admin.
    The PI admin will likely not be logging in every day to check job approval status.   I can't see anywhere that notifies the admin via email that a job is waiting.  can this be done or am I missing something?
    -Tim

    Hi Tim,
    I don't think we have an email optiom to notify the ADMIN to approve the pending jobs ,however if you authorized any job then ONLY admin can approve to run the job.
    check the below link:
    http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/administrator/guide/config_server_settings.html#wp1081686
    Thanks-
    Afroz
    [Do rate the useful post]

  • LMS 4.1 - Job approval Disable error

    Hi all,
    I have created VRF from LMS 5.1. some days ago i created it sucessful but now it gives me job fail and reason is Job Approval Disable.
    Can anyone give hint what is the problem
    Please help.
    i have attached the images

    Job Approval is an option which it just notifies, that it is disabled. Like other options, ie Email Notification, Parallel Execution, Job Password etc.
    Job approval is an option where help desk users after creating any job need to wait for execution of job till a user with Approver priviliedge has not approved the job.
    The Failure may have some other underlying problem, like incorrect credentials etc. On fail device you should check the failure reason.

  • Workflow for Preventive Maintenance Job Approval

    I need a workflow for Preventive Maintenance Job Approval.
    Whenever a PM user issues for a Preventive Maintenance Job it should go for approval up to two level of authority.
    Can some one suggest some standard tasks or workflow template which will be useful for the purpose?
    Regards,
    Manas

    Hi Manas Santra,
    I dont think that there is a standard workflow is available for preventive maintanance.
    Thanks and Regards
    Balaji E.

  • Ciscoworks Job error

    I am receiving the following error on jobs that i have created and have been approved to run. ERROR:RME_CDL1004:Pre-Job execution operation failed I have run simlar jobs but just started to receive this error.
    Teddy Agee RPC

    The job is a scheduled job that is a netconfig jobs I will post the jobs summary here
    NetConfig Job
    Job Details as on Jun 11 2010 11:58:52 EDT
      Job ID:  2579       Status:  Job Failed
    General Info
    Owner:
    tagee
    Description:
    Show IP interface Brief
    Schedule Type:
    Run Once
    Schedule Time:
    Thu Jun 10 19:45:00 EDT 2010
    Job Policies
    Failure Policy:
    Ignore failure and continue
    E-mail Notification:
    [[email protected]]
    Execution Policy:
    Parallel
    Fail on Mismatch of Config Versions:
    Disabled
    Copy Running Config to Startup:
    Enabled
    Sync Archive before Job Execution:
    Enabled
    Job Password:
    Disabled
    Job Approval Details
    Job Approval:
    Enabled
    Approval List:
    Netops
    Maker E-mail ID:
    [email protected]
    Task Details
    Task: SH_IP_Interface_brief
    Commands
    sh ip interface brief
    Devices
    70360.00401.1.RT01
    70433.00601.1.RT01
    74023.00425.1.RT01
    39440.00405.1.RT01
    70501.00405.1.RT01
    15301.00610.1.RT01
    73802.00401.1.RT01
    73644.00403.1.RT01
    70508.00403.1.RT01
    73052.00401.1.RT01
    Job Summary
    Status:
    Job Failed
    Start Time:
    Thu Jun 10 19:45:11 EDT 2010
    End Time:
    Thu Jun 10 19:45:13 EDT 2010
    Job Messages
    Pre-job Execution:
    User or Device authorization failed for user : tagee
    Please make sure user has privilege to operate on following devices: 73802.00401.1.RT01
    Post-job Execution:
    Device Update
    Successful:
    0
    Failed:
    0
    Not Attempted:
    0
    Pending:
    0
    Job Execution Summary

  • LMS 4.1 - No Template Center Job Approval?

    Hi,
    I cannot find an option to enable Job Approval for Template Center Tasks.
    Is this not possible for Template Center?

    No, Template Center approval has not yet been implemented.  There is a bug open for this, CSCtl21503.

  • RME JOB APPROVAL QUESTION

    When I schedule a job (non-immediate), e.g. a netconfig job to add snmp community string, I get the error message" CFG0021: Could not create job. Possible cause: Cannot submit jobs for approval. Approval emails cannot be sent".
    I have the correct smtp server sitting on the same subnet as the LMS Server (version 3.0) as well as a valid exchange id.
    Any suggestions will be great.

    Check the smtp.log and see if there are any related error messages

  • CiscoWorks LMS with secure SMTP

    Hi,
    I have got a CiscoWorks LMS server to install. The client does not have an internal mail server but uses an external mail server on the internet that requires authentication and secure smtp. From the ciscoworks SMTP configuration in Common Services, there is no option to provide username and password for the smtp server.
    If there a means to configure that from Command line or a file in CiscoWorks configuration?
    Thanks for your help,
    Ashley

    This is not supported.  There is an enhancement request (CSCin30857) open to add this capability.

  • CiscoWorks - Job Browser very slow

    Hello,
    We are running LMS 3.2 and I am trying to access Common Services -> Server -> Admin -> Job Browser but it is extremely slow. Waited for half hour yet it is processing the response page.
    Please assist.
    Thanks.

    this sounds as you have running LMS for quite a while but job purging is not configured (or not properly configured)
    When the job browser page opens, how many jobs are listed? You will see the job count in the upper right corner above the table.
    one starting point to look at is:
        Resource Manager Essentials > Admin > System Preferences > Job Purge
    if there are no purge jobs configured, schedule and enable these jobs.
    With LMS 3.2 you can also filter for specific jobs (CS > Server > Admin > Job Browser), select those with many instances and delete the historic job infos. BUT DO NOT DELETE the INSTANCES of jobs which are scheduled to run in the future (otherwise these jobs are deleted and will need to be reconfigured).

  • Request waiting for approval

    Hi,
    I have request that is in status running from last 24 hours and waht it is doing is
    begin PO_REQAPPROVAL_ACTION.APPROVE_DOC (:v1, :v2, :v3, :v4, :v5); end;
    I got this by query
    SELECT vs.inst_id,vs.osuser,vw.event,vw.p1,vw.p2,vw.p3 ,vt.sql_text , vs.program
    FROM gv$session_wait vw, gv$sqltext vt , gv$session vs
    WHERE
    vt.address=vs.sql_address
    AND vs.inst_id = vw.inst_id
    AND vs.sid = vw.sid
    and vs.sid=xxxx
    Any idea what it is doing or how i process this or cancel this request or database session?
    thanks

    Hi Karunakar,
    Using Admin Delegation option will allow access to entire work Inbox of the Approver A who is on leave to Approver B who is delegated approver.
    NWBC -> Access Management -> Access Request Adminstration -> Admin Delegation
    If you really want only few requests to be approved by Delegated Approver Security admin can forward the request to new approver when main approver is on leave.
    Regards,
    Madhu.

  • Setup Approver List in LMS 3.1

    Hi All, Has anyone setup approval feature in LMS3.1. I want it to setup for my customer. Customer wants that helpdesk will create a job and then it should come to Network Manager for approval and without approval job should not be executed.
    Can anyone explain me how does it work and what is the requirement to achieve this and what are the step involve in it.

    Help desk users typically don't create jobs.  This task usually falls to Network Operators.  They would create a job, then before the job could run, it would require approval from someone on the approval list.  That approver need not have any other access to LMS except to approve jobs (i.e. they would only be given the Approver role).  If the job is not approved by the time it is scheduled to run, then it will be canceled.
    To setup an approver list, you need to first add users to LMS with the Approver role.  Then go to RME > Admin > Approval > Create/Edit Approver Lists, and create a list.  You can assign an approver list to a various job-based task under the Assign Approver Lists TOC task.  Finally, go to Approval Policies to enable the approver feature for a given job-based task.
    I highly recommend you first review the context sensitive online help in RME so that you fully understand the flow of maker (the job creator) and checker (the job approver).

  • Cron Job in Statistics

    Hi all,
    Is oracle recommend any cron job in secure enterprise search? I want to send a STATISTICS to email to administrator email address. Is any standard cron job is there?
    Thanks!

    Internally, we do this using Enterprise Manager.
    Have a look at the paper here:
    http://www.oracle.com/technology/products/oses/pdf/ses_em_whitepaper.doc
    Even if you don't wish to use EM, this will probably give you some useful info for creating cron jobs.

  • Ciscoworks backup configuration routers and switches

    Re: How to configure configuration backup in CiscoWorks
    Go to RME - Admin - Config Management
    From there you can edit your Transport, Archive and Collection Settings.
    Once this is done everything should be setup for config collection.
    hey, i am trying to configure automaticaly backup.
    i added the equipment to RME some is grey and some is good.
    RME>Administration>Config Managment
    there: Archive location : here some directory
    then i go to, Collection Settings and make Periodic Polling and Periodic Collection . Enable and Schedule to 5 minutes from now
    then i wait like 20 minutes no backup was created in the directory i choose, plus- does it backup everything in the rme ? or should i somewhere mark
    the devices i wanna backup
    thanks in advance
    Ben

    the folders exist in the location you mentioned
    shadow > primary,vlan etc..
    , but i'll check cause it might have been created with the admin account which opened an account for me.
    as for your question i'm using version LMS2.6
    theres the server itself users and theres the ciscoworks user under Security,
    how do i ensure that the user can write over that folder?
    as for the equipment(grey) i believe it's an snmp community mismatch, that is not important i'll fix that just after i manage to make a config backup.
    the main question is, is Collection backup the entire equipment that exist in the rme devices or i have to pick.
    Thank you very much for your time
    Ben.

  • PO Approver and Approver Hierarchy

    Hi,
    Any body can give the solution to solve the following issues
    1.how can we add PO Approver to particular user.
    2.how can we add new approver or approvers to the approval hierarchy in PO.

    It's not practical for someone to give you the navigation steps without knowing how your approvals are set in your system because the steps are different if you are using position hierarchy or direct hierarchy. The steps are also different depending on whether you have HR installed. You should check Chapter 2 "Approval, Security, and Control" of the Oracle Purchasing User’s Guide.

  • LMS 3.2 - Change Management

    Hi,
    Is there something within CiscoWorks LMS 3.2 that allows you to raise or generate some kind of form that can be emailed or printed if a change on a device is required.
    Nish

    You can use the job approval options in RME to perform change management using the steps outline below from the users guide. 
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_resource_manager_essentials/4.3/user/guide/jobmgt.html
    Enabling Approval and Approving Jobs Using Job Approval
    Resource Manager Essentials (RME) applications, such as NetConfig, Config Editor, Archive Management, and Software Management allow you to schedule jobs to perform their tasks. Job Approval allows you to require that one of a group of users designated as job Approvers approves each job before it can run.
    This section contains:
    •Job Approval Workflow
    •Job Management
    Job Approval sends job requests through e-mail to users on a job's Approver list. If none of the Approvers approve the job before its scheduled run time, or if an Approver rejects the job, the job is moved to the rejected state and will not run.
    When Job Approval is enabled, applications that use it, require you to schedule the job to run in the future, rather than immediately. Job approval cannot be enabled for jobs that run immediately.
    A user with the appropriate privileges uses a CiscoWorks application to schedule jobs.
    When you use Job Approval, different people can perform different tasks:

Maybe you are looking for