Profile for Lobby Ambassador Account

How do you configure the Lobby Ambass. Profiles. This is so I can set the defaults for users that the Lobby Ambass configures.

This is under the WLC not WCS. For WCS, look at this doc:
http://www.cisco.com/en/US/docs/wireless/wcs/5.1/configuration/guide/wcsmanag.html#wp1077061

Similar Messages

WCS Lobby Ambassador Accounts

Unable to manage Guest accounts created by different WCS Lobby Ambassador user Accounts.
I have setup three Lobby Ambassador accounts in WCS. Three staff members have been given seperate usernames and passwords to WCS with Lobby Ambassador profiles to allow them to create and manage the Guest Wireless Accounts.
It was expected that they would be able to view and manange all Guest accounts, but they can only manage accounts they created. If I login as WCS admin I can then see all accounts created by each user.
We require that all three can view and manage each others accounts using their own WCS login. Is this possible as docs do not mention??

Hi Stuart,
Just to add a note to the great tips from Leo;
CSCsw42942 Bug Details
SuperUser cannot see guest users created by admin users
Symptom:
If a WCS admin user creates a guest user through controller template, a Superuser will not be able to see the guest user created.
Conditions:
wcs 5.2.110
Workaround:
the root user can see everything
Further Problem Description: Status
Fixed
Severity
3 - moderate
Last Modified
In Last 3 Days
Product
Cisco Wireless Control System
Technology
1st Found-In
5.2(110.0)
Fixed-In
5.2(122.0)
6.0(23.0)
Have a look at this good recent thread;
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Security%20and%20Network%20Management&topicID=.ee6e8c0&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc2cc01
And this good thread;
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Wireless%20-%20Mobility&topic=Security%20and%20Network%20Management&topicID=.ee6e8c0&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc3077f
Hope this helps!
Rob

Lobby Ambassador account

I am running WCS 6.0.132. I have a Guest User account where I as the Administrator change the password. I setup a Lobby Ambassador account so I can have our helpdesk change the password. However When I login as the Lobby Ambassador I can not see the guest user account.
What am I missing in the configuration?

There was a version of WCS where they changed how the accounts were visible. I do believe there was a bug in it. I'm just going off of memory of us having a similiar issue and that version is a few rev's old. I would recommend upgrading to the newest version and see if it resolves the problem.

Lobby Ambassador Account creation in NCS/Prime

When creating a lobby ambassodor account in Prime.
I see a Profile of Default but don't see the WLAN Ids of the WLCs-
Shouldn't the Wlans or SSIDs appear in the list of Profiles so said Lobby Ambassodor can create accounts for a particular SSID as does in the Controller creation of guest accounts?

Rob,
Take a look here... I created multiple Guest SSID's
Thanks,
Scott
*****Help out other by using the rating system and marking answered questions as "Answered"*****

Can't setup a Lobby Ambassador account??

I've just installed a new WLC4402 (50AP) and am trying to set up guest WLAN access.
So far I have a seperate VLAN and WLAN configured and have secured the VLAN to allow only access to the internet after web-auth.
I go to the 'Management> Local Management Users> New Page'
But the only types of account available are 'Read/Write' and 'Read Only', Should the 'lobby Ambassador' be listed here, or am I missing something?
All the best to all the Forum users for the season.
Dan

Hi Dan,
It should be there if you are running 4.0+ software. If you are running 4.0+ then you could try adding the user via CLI to see if it's an option:
config mgmtuser lobby-admin
If you are running 3.2 or earlier, then that's the problem.
-Ben

Wireless Lobby Ambassador account errantly displays NCS home page

Hi all,
I'm running a supported NCS 1.0 virtual appliance installation which functions fine for most folks, but Lobby Ambassadors with Windows 7 and IE8 or IE9 end up seeing an odd version of the NCS home page with all the graphs, etc, rather than the normal very restrictive list of guest users. Viewed with the same credentials with XP and IE7 or IE8, it's fine! Does not matter whether or not Chrome Frame gets installed. It's not as though the credentials are truly elevated, since the entire command bar is devoid of commands....it just doesn't show the list of guest users.
Anyone else?
Gary

Noticed there is released a patch for 1.1.1 on the 14th of June, but havent been able to find any release notes for the patch.
Tried to install it my self, it fails every time with "% Manifest file not found in the bundle"
Getting the same error no matter if I use the main command /patch install or /application update
application update ncs1_1_update_file.ubf FTPRepository
patch install ncs1_1_update_file.ubf FTPRepository
* Edit : the patch in question is only for the WAN release, which doesnt include wireless management, so I guess we are waiting for a seperate patch for the general packadge

Authorization profile for partner user account

Can anyone please tell me which authorization profile should be assigned to the user account that a partner of ours will use when they use basic authentication to sign on to our PI box when they consume a web service?
Regards
Philip
Edited by: Philip Koch on Mar 16, 2009 3:38 PM

Can anyone please tell me which authorization profile should be assigned to the user account that a partner of ours will use when they use basic authentication to sign on to our PI box when they consume a web service?
Regards
Philip
Edited by: Philip Koch on Mar 16, 2009 3:38 PM

Lobby Ambassador TACACS denied to create Guest Users

Hi,
I read some threads but I found no answer.
I use WCS 7.0.172.0 an ACS 5.2
I configured in ACS a Shell Profile for Lobby Ambassador Accs like I did for Admins.
If I login as such lobby ambassador, I see just what i have to see. But if i'm going to create a guest user I got the message:
Permission Denied
You do not have privileges for the requested operation.
After Forum reading I created a local user with exact the same name, differnt pw, with no success.
The shell profile:
role0 | mandtory | LobbyAmbassador
task0 | mandtory | Configure Guest Users
task1 | mandtory | Lobby Ambassador User Preferences
Thx 4 reading!
btw: I just can authenticate with tacas+/pap, if I configure chap I've got a failure. chap is allowed in ACS...

OK I fixed it.
I had to add:
virtual-domain0 | mandatory | root
to the top of the shell profile, like described in:
http://www.cisco.com/en/US/docs/wireless/wcs/7.0/configuration/guide/7_0admin.html
now it works...
The WCS "Task List" output of the group hasn't list it...
But the CHAP probleme still wasn't fixed. Anyone who use TACACS/CHAP auth?

Lobby Ambassador Profiles in ACS 5.3

We've set our WCS up to do AAA through our ACS 5.3 which works great. So in order to log into the WCS for Administration or as a Lobby Ambassador (to create guest users etc) the AAA is all done by the ACS, GREAT!
I have assigned a set of users the Lobby Ambassador role as passed that back through TACACS to the WCS, so those users have their role setup as Lobby Ambassador and are limited from doing anything else, as expected.
What I want to know is: With normal local AAA on the WCS, when you created a Lobby Ambassador account, you could give the account a set of defaults for any guests accounts created by that Lobby Ambassador account, which was good, so Lobby Ambassadors couldn't set up unlimited time accounts and stuff like that.
What I want to know now is that since I'm now doing all the AAA on the ACS, is there an attribute I can pass to the WCS in the Shell Profile, along with the roles etc telling the WCS what the guest user creation defaults for the Lobby Ambassador account is, so that we can continue to limit the defaults of any guest account that the Lobby Ambassador accounts create, as it used to be? We'd really like different lobby ambassadors to be able to do different things as well. i.e., Lobby Ambassador X can only create accounts for one region. Lobby Ambassador Y can create Unlimited time accounts where the others can not. We used to do this by assigning different guest user creation defaults to different lobby ambassador accounts on the WCS.
Help appreciated

Hi,
at the moment the only solution for your requirement is to create local NCS/WCS accounts with exactly the same username as existing in your ACS, no matter what password. Authentication will happen via TACACS+ while the defaults will be taken from the local user account. Please be aware that this mechanism is case sensitive.
Regards
Stefan

Lobby Ambassador - WCS Logging of Guest Account Creation

Hello all,
If I am user "admin-ken" and I setup an guest user account "guestuser1" via the WCS controller templates > Guest User (which takes me into lobby ambassador), is there a log file that indicates that "admin-ken" had setup "guestuser1" guest account?
Many thx indeed,
Kind regards,
Ken

HiKen,
Hope all is well :)
Maybe this is what you are looking for;
Logging the Lobby Ambassador Activities
The following activities are logged for each lobby ambassador account:
â¢Lobby ambassador login: WCS logs the authentication operation results for all users.
â¢Guest user creation: When a lobby ambassador creates a guest user account, WCS logs the guest user name.
â¢Guest user deletion: When a lobby ambassador deletes the guest user account, WCS logs the deleted guest user name.
â¢Account updates: WCS logs the details of any updates made to the guest user account. For example, increasing the life time.
Follow these steps to view the lobby ambassador activities.
Note You must have superuser status to open this window.
Step 1 Log into the Navigator or WCS user interface as an administrator.
Step 2 Click Administration > AAA, then click Groups in the left sidebar menu to display the All Groups window.
Step 3 On the All Groups windows, click the Audit Trail icon for the lobby ambassador account you want to view. The Audit Trail window for the lobby ambassador displays.
This window enables you to view a list of lobby ambassador activities over time.
â¢User: User login name
â¢Operation: Type of operation audited
â¢Time: Time operation was audited
â¢Status: Success or failure
Step 4 To clear the audit trail, choose Clear Audit Trail from the Select a command drop-down menu and click GO.
http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1076868
http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001609
Hope this helps!
Rob

Customize Lobby Ambassador View

Hi all,
I have a problem with the following situation:
- Cisco Prime Infrastructure 2.0 (2.0.0.0.294)
- Cisco ACS 5.4 (5.4.0.46.0a)
- 2x Cisco WLAN Controller 5508 in SSO mode
- x APs 2600 Series
All devices are configured properly, I can see the WLC on Prime, etc.
Prime and WLC are added to ACS for TACACS+ Authentication.
Admin users are able to login to Prime with full feature set (root permission).
Lobby Ambassadors can also login to Prime for Guest User creation.
Therefore I have created two Shell Profiles on ACS.
Now I want to create WLAN Guest User with Lobby Ambassador Account (TACACS-authenticated!).
I want to customize the Default Guest User Creation page with a company logo and some default settings (WLAN Profile, Apply to Controller List, set "generate password" to fixed, etc.) to fixed values.
Only thing what Lobby Ambassador can change should be setting the password period (with hours or using calender), guest user name and description.
If I configure a local user on Prime, I can customize the page.
However if I use TACACS user, I am not able to use the customized page.
Can anybody help me with this issue?
THANKS a lot!!!!
edit: problem solved by workaround...
https://supportforums.cisco.com/thread/2201703
BR, Stefan

You will not be able to unless you build a back-end that does it and sends the commands to the WLC. Other than that, you can't customize the lobby ambassador page.
Sent from Cisco Technical Support iPhone App

Lobby Ambassador - Selecting Profile

We have a WCS version 5.2.130 and WLC version 4.2.130.0
Not very familiar with it. The issue here is although the WLC is reachable from WCS, I can't seems to select a profile when we want to create guest users from lobby ambassador. The WLC has been configured with 2 wlans - wlanguest and wlan01 but I can't select this profile to assign the user to.
Hope someone can shed some light.

For guest users and lobby admins, the WLAN profiles that can be selected from the WLC are only those that are using WEB-AUTH as security policy.
Make sure the WLAN profile for guest user is using web-auth on your WLC, that will address your issue.

How do I merge two profiles (different time periods) on two computers for one email account, into one profile?

I have a primary computer which has emails back for several years (Thunderbird). One account is rather important to me and I created it with IMAP on a laptop which I took overseas. When returning, I noted that all of the emails to that date (January 2015) had downloaded onto the laptop Thunderbird for this account.
When I accessed the primary computer at home, for some reason it cleared every email I had in my profile up to the date I last used the laptop overseas. All the "Inbox.mozmsgs" seem to be there (whatever *they* are) but all the emails prior to January 2015 are gone in Thunderbird.
What I want to do is copy the profile *for this account only* from my laptop and somehow merge that (pre-January) with the same profile account in my desktop (post-January) so that once again I have the full email history on my primary computer, the desktop.
I cannot find any explicit instructions on how to accomplish this. I would very much appreciate well thought out assistance. There must be a way - otherwise I will need to set up a virtual machine and create an account on that on my desktop for the pre-January profile, which will be a little tedious).
Thanks in advance...

There are two approaches which would work for you.
# copy the profile folder ********.profile from your laptop to your home computer and use https://support.mozilla.org/en-US/kb/using-multiple-profiles to switch back and forth.
# export the mail from your laptop to an external medium and then import it to your home computer. There is an add-on to TB which allows import and export of emails in various formats to a separate storage medium (external disk, thumb drive, etc.). The instructions on how to download and install it can be found at http://barryduggan.info/exportMail.php

[Microsoft Store][Profile][Billing] How Do I Change Country/Residence for Microsoft Account? Editing Your Microsoft Account Profile for Microsoft Store. SOLVED: Change Home Location

Hello,
I am experiencing problems with using my Microsoft Account for billing and purchasing apps in Windows store.
I am using my old WLID that I've created several years ago, and I have obsolete information including my country residence there. Now when I go to
https://billing.microsoft.com, I see that I have 2 profiles:
Personal profile: US
Business profile: Russia.
Now the problem is that I want my personal profile be changed to Russia as well. Having US in the profile makes it impossible to make purchases from Microsoft Store because Store does not allow for changing country when making purchases via PayPal.
Currently I have this information:
I need the Country/Residence information to be changed to Russia. How do I do that?
I am stuck.
How do I change country for my Microsoft Account?
If it's not possible, would I be able to continue using my Microsoft Account with old residence/country information while making purchases through a new Microsoft account where I have specified my current residence?
Or is it the same as with Windows Phone 7:
http://support.microsoft.com/kb/2692008
If yes, do I understand that I have to start all my 'virtual living' from scratch to use Microsoft Store? In other words, do I have to sign-in into Windows 8 with a new Microsoft Account that will have Russia specified as a Country/Region to purchase apps
from Microsoft Store?
If yes, can I use this new account only for purchasing apps while continuing to use my old account or all purchased apps are strictly tied to this new Microsoft Account I will use for purchasing?
Thank you.
Well this is the world we live in And these are the hands we're given...

Hello,
Thanks to
this post @ Microsoft Answers, I was able to make Microsoft Store use correct information of my current country residence.
//The drawback in my case was that I lost the possibility to pay with Paypal, although Paypal supports payments in Russia, and, most importantly, I lost access to US marketplace, all comments/reviews are now in Russian. What a bummer! Honestly, I'd
like to have access to US store... Seems like the only workaround it to switch Home location for the time I purchase an app and change back when the app is purchased.
To change the Country/region data used for Payment and Billing in Microsoft Store,
Press WindowsKey+W to show Start screen and focus on searching in
Settings.
Type 'region' (without quotes) and open Region dialog box when found.
In the Region dialog switch to Location tab and change the country of choice in the
Home location drop-down list.
Click OK to apply changes and make them effective.
Open Store and press WindowsKey+I to show settings charms then choose
Your account.
In the Your account screen click Add payment method to configure your payment settings that will be used for purchasing apps from Windows Store.
Notice Country/region value has changed.
This country will be specified in Country/residence within Payment and Billing in Microsoft Store app.
Well this is the world we live in And these are the hands we're given...

WCS Lobby Ambassador audit report for a specific period of time

Hi all,
I know there is an WCS audit report for each lobby ambassador activities. But the problem is that I see only activities from Nov 9 to the present. I don't know what the reason is, whether somebody erased that information before Nov 9 or something else happened.
Is there any option to manually configure a specific period of time, for example obtain all activities for last 3 months?
Thanks for any hint.
Jozef

Hi Koti,
What error did you meet when you used audit report from Oct 16 to Oct 31?
Please check the log file to find more information about this issue. The path of the log file is: C:\Program Files\Common Files\microsoft shared\Web Server Extensions\15\LOGS. You can check the log file whose modified date is from Oct 16 to Oct 31.
In addition, please deactivate and reactivate Reporting feature at site collection level.
A similar post for your reference:
http://sharepointknowledgebase.blogspot.com/2012/07/unexpected-error-when-trying-to-view.html#.VG2cFouUeog
About audit log report, please take a look at:
https://support.office.com/en-us/article/Configure-audit-settings-for-a-site-collection-a9920c97-38c0-44f2-8bcb-4cf1e2ae22d2?ui=en-US&rs=en-US&ad=US
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Profile for Lobby Ambassador Account

Similar Messages

Maybe you are looking for