View-only access to Catalyst 2960/2960S device manager

I have noticed that when I access the (Web-based) device manager on a Catalyst 2960 or 2960S switch, the authentication prompt (from within IE, at least) includes the phrase, "The server <switch-hostname> at level_15_or_view_access requires a username and password." This would seem to imply that it's possible to configure view-only (a.k.a. read-only) access to the device manager, which would be perfect for first-level support personnel (in our environment). I reviewed the information on how to configure local authentication for the Web server (leveraging "ip http authentication local" among other commands), but the examples are a bit too broad for me understand how to specifically (and only) allow someone coming in via HTTP(S) to gain read-only access to the device manager. (Command line access should be denied entirely for the view-only user, if possible, or at least limited to commands that can't modify the switch's configuration.) Assuming this is possible, could someone cite the command sequence required?
Thanks,
Mike

Hi,a customer want a user which has view-only rights on his catalyst switches. I created a user whit privilige level 7.If you log into the CLI everything is fine. But by trying to log into the web page the system wants a level 15 user.Is their any possibility to grant the level 7 user "view-only" rights on the Catalyst Device Manager?Thanks.Thanks.
Hi,
Check out the below link for SDM for read only user configuration
http://conft.com/en/US/docs/routers/access/cisco_router_and_security_device_manager/application/notes/SDMcli.pdf
Hope to Help !!
Ganesh.H
Remember to rate the helpful post

Similar Messages

  • BOE XI 3.1 - 'View only access' to ADMIN User Account

    Guys,
    we are using BOE XI 3.1 FixPack 1.6 version.
    I want to create a Test ID (for example, Test_ID) which is having ADMIN Access. But i need to provide 'View Only Access' to this Test ID account. Means this Test ID can enter into CMC. But should not modify/delete/add/ users or usergroups or folders in CMC.
    Is it possible to provide 'View Only Access' to the user who is having ADMIN access?
    Much appreciated. Thank you.

    Hi Seb,
    This is not working. I tried the same in one of the Test ID (This is an Enterprise Account).
    But i am getting the message "Account information not recognized: Access is denied" in the CMC login page.
    I logged in via Administrator and verified the Test ID. The account is enabled.
    Please any help.
    Thank you.
    regards,
    Kiruba v.r.

  • OAM View-Only Access in 11.5.10.2?

    Is there any way to give a user view-only, or inquiry, access to OAM?
    Or is there any way to give a user any access (view-only or not) to OAM without granting that user the "System Administrator" responsibility?
    We are on 11.5.10.2 (CU2).
    For SOX compliance, we need to remove "System Administrator" from our developers' EBS IDs. But these developers then lose any access to OAM when their "System Administrator" responsibility assignment is removed.
    Auditors might find this surprising, but our developers need access -- even if View-Only -- to OAM in Production in order to monitor complex things like Workflow processes, managers, etc.
    11.5.10.2 does have 2 seeded OAM responsibilities, but they do not seem to grant a user any access to OAM: "OAM Patch History" and "OAM Read Only Mode".
    Any suggestions would be appreciated.

    Did you figure out a way to achieve this?I believe this cannot be achieved -- Please log a SR to confirm this with Oracle support.
    Thanks,
    Hussein

  • View only access to iCloud files

    I can send a link to my keynote files on iCloud, but is it possible to restric this to view only? I want to share slide shows with my students, but I don't want them editing my slides! Thanks....

    I see that there is a "View Only" option when I enable sharing in my keynote presentation.  But when I view the presentation while being signed out on a different computer, I am able to download and even edit the presentation!  What gives?  I can even print the presentation.

  • Material Description View Only Access

    We are trying to restrict the ability to change the material description for any transaction other than MM01 to the Basic Data 1 and 2 views. Due to business concerns, locking that field is not an option. We attempted to customize the subscreens to set the field attribute to output only, but it is set at a global level and setting the field to output only everywhere. This has been attempted through both Screen Painter and by following the documented subscreen customization process.
    I would greatly appreciate any input or suggestions.

    Dear Jeff,
    You could do this with Transaction Variant - Transaction SHD0.
    http://help.sap.com/saphelp_webas620/helpdata/en/eb/5fab41d79b11d296190000e82de14a/content.htm
    In the SAP Reference IMG, you can create transaction variants. Choose Basis Components -> Application Personalization -> Tailoring of Application Transactions -> Configure Transaction-Related Display Values for Fields (Transaction SHD0). Transaction variants allow you to preset values for fields in a transaction, set field attributes, or hide entire screens.
    To execute a transaction variant, you define a variant transaction using the Transaction Maintenance transaction (SE93).
    Once you have entered a transaction code and short description, choose transaction type Transaction with variant (Variant transaction).
    To define a variant, enter the name of the transaction and the name of the variant. You can then use the new transaction code to start the special variant of the transaction.
    Hope this will help.
    Regards,
    Naveen.

  • Visual administrator access - view only access

    Are there any roles available for just view access to Visaul Administrator tool? 
    We would like to give view access to the development team if that is possible...thanks..

    Hi,
    There no such type of Access providing to the developers
    We have to Login into VA with J2EE User itself. So no Chance
    Check with this Link if Helpfull
    http://www.erpgenie.com/sap/netweaver/xi/xiauthorizations.htm
    Regards
    Seshagiri
    Edited by: N V Seshagiri on Feb 19, 2008 5:26 AM

  • Opening a shared "view only" Keynote in Keynote for iOS ?

    I've shared a keynote with co-workers and given them view-only access.  It really needs to be viewed either on a Mac or in Keynote for iOS so that it retains it's audio soundtrack and it's animations.  My co-workers don't have Macs, but they do all have staff iPads.  When I send them a link to share the view-only keynote, it tries to direct them to a Safari tab and iCloud. 
    Is there a way for them to open a view-only Keynote in the Keynote app for iOS?  That's the only way they can see it with the designed animations and audio.

    I figured it out and they DO play the background soundtrack on the iPad.
    These were files created in Keynote 5.3 (iWork '09).  However, since that version doesn't allow sharing to iCloud, I made a copy of the file and opened it in Keynote 6.2 (newest version).  I shared it to iCloud as view-only.
    When you click on the emailed link to the shared document, it opens a page in Safari on the iPad.  This page includes a download link.  Once you wait for the download process to finish, the normal "Open in. . ." popup (overlay at the top) appears on the Safari page and it then allows you to open the presentation in Keynote for iOS.  This plays the file AND the background soundtrack.  One of the presentations had an iTunes playlist as the background soundtrack.  Another presentation had a "recorded narrative".  Both files played with their audio intact. 

  • View only responsibiliteis in 11.5.8

    Can someone please help me ? I am new at this. I want to set up the resposibilities in "view only" mode so that user cann't update the data. Does anyone knoe how to do this?
    Please let me know. Any help would be appreciated.
    Nikunj

    From Release 11 there are seeded Inquiry Only responsibilities available for few modules.. For e.g. Payables Inquiry, Receivables Inquiry. These responsibilities can be assigned to the users as View Only access modules.
    To check the seeded responsibilities: System Administrator responsibility
    Navigate: Security&gt;Responsibility&gt;Define
    Find: %Inquiry
    For the modules where such feature is not available, you may have to determine the Form Functions for which you need query only feature.
    Login as System Administrator: Application--&gt;Function--&gt;
    In form function window query the function that you want to run in QUERY ONLY mode, create a new Function (record) using this function name, and enter QUERY_ONLY=YES in the parameters field. Create or modify the menu and menu structure that needs to be attached to this function. Create or modify the responsibility to associate with the above menu/menu structure. Finally assign this responsibility to the user.
    Best Regards,
    Sanjeev

  • How to grant accountB view only permission to all objects owner by accountA

    Hello,
    I would like to accountB have view only access to AccountA's objects, tables, views, procedure names and code, functions name and code, etc.
    I do NOT want the accountB create any new object or execute any object belongs to accountA.
    How do I do that?
    Thanks.

    Tables and views are relatively easy, but you've got to do it on an object by object basis (thus it will need to be part of the promotion process whenever A creates a new object). You can write a bit of dynamic SQL to handle the grants for existing objects.
    CREATE ROLE a_read_only;
    BEGIN
      FOR t IN (SELECT * FROM dba_tables WHERE owner = 'A')
      LOOP
        EXECUTE IMMEDIATE 'GRANT SELECT ON a.' || t.table_name || ' TO a_read_only';
      END LOOP;
      FOR t IN (SELECT * FROM dba_views WHERE owner = 'A')
      LOOP
        EXECUTE IMMEDIATE 'GRANT SELECT ON a.' || t.view_name || ' TO a_read_only';
      END LOOP;
    END;
    GRANT a_read_only
       TO b;Granting access to code is a bit more complex (at least potentially). From a database perspective, you can grant A SELECT access on DBA_SOURCE. That will allow B to write queries against DBA_SOURCE to see code but it will apply to all code that anyone owns, not just A. And if B is using a tool to try to view the code, that tool will generally want to query ALL_SOURCE which only has data for the source of objects that B has the ability to execute. You could create a view that exposes just the rows from DBA_SOURCE that you want B to see but then no tool will ever be able to display the source.
    Justin

  • Avoid read-only access at physical standby

    Hi!
    DB=11.2.0.2
    when I start the standby with
    SQL> startup
    the db is open read-only.
    Is there a way to configure the db so that startup command only mounts the db and start redo apply?
    this is the config:
    DGMGRL> show configuration verbose;
    Configuration - w
    Protection Mode: MaxPerformance
    Databases:
    w_01 - Primary database
    w_02 - (*) Physical standby database
    (*) Fast-Start Failover target
    Properties:
    FastStartFailoverThreshold = '30'
    OperationTimeout = '30'
    FastStartFailoverLagLimit = '30'
    CommunicationTimeout = '180'
    FastStartFailoverAutoReinstate = 'TRUE'
    FastStartFailoverPmyShutdown = 'TRUE'
    BystandersFollowRoleChange = 'ALL'
    Fast-Start Failover: ENABLED
    Threshold: 30 seconds
    Target: w_02
    Observer: ora
    Lag Limit: 30 seconds
    Shutdown Primary: TRUE
    Auto-reinstate: TRUE
    Configuration Status:
    SUCCESS
    DGMGRL> show database w_02
    Database - w_02
    Role: PHYSICAL STANDBY
    Intended State: APPLY-ON
    Transport Lag: 0 seconds
    Apply Lag: 0 seconds
    Real Time Query: OFF
    Instance(s):
    w
    Database Status:
    SUCCESS
    br
    Daniel

    If Data Guard is setup correctly the application is not losing data, you cannot read from it, but it will apply logs:
    Ex.
    /home/oracle:STANDBY >sqlplus "/ as sysdba"
    SQL> select * from BIGSHOW.CUSTOMER;
    select * from BIGSHOW.CUSTOMER
    ERROR at line 1:
    ORA-01219: database not open: queries allowed on fixed tables/views only
    So even as the SYS user I cannot read from my test user's tables.
    ORA-01219 is expected when the standby is in this state.
    You can open READ ONLY if you have Active Data Guard, but generally that will cost you extra.
    OR, you can do thing to check your data:
    To open a standby database for read-only access when it is currently performing managed recovery:
    Cancel log apply services:
    SQL> ALTER DATABASE RECOVER MANAGED STANDBY DATABASE CANCEL;
    Open the database for read-only access:
    SQL> ALTER DATABASE OPEN READ ONLY;
    At some point you have start the recovery again, you probably don't have an issue.
    If you want more peace of mind on this you have to setup a test Data Guard system and bang on it.
    Best Regards
    mseberg

  • Allowing View Only right to CMC in BO 4

    We are trying to create a VIEW only access to our BO consultant in our production CMC.  But there are certain things that are hard to control.  For example, Authentication - Is there a way to make it VIEW only.  How about other options listed below - is there a way to make it so he can view it but not change it;
    Deleting Licensing Info
    not allow changes to Configuration of Audit database
    in Settings not allow hot backup durations, cluster members, Reset Account Activity - Peak Licenses user
    We are using BO 4.0 SP5 Patch 5.4 on a windows server.
    Thanks
    Abdul

    Hi,
    you can find more information hete:
    What's new in BI 4.0 SP06 - Specify CMC Tab access with user group
    Please be aware that this functionality is available only with SP06 and later.
    Regards
    -Seb.

  • Is there way 2 give users VIEW only in Adm Services Console(essbase)?

    Hi,
    Currently we have ADMIN user logging into "Administration Services Console" (essbase) and we would like to give access to a super user access to this as well so he can view the calcs. Is there a way to give that person VIEW only access?
    jang

    galen2 wrote:
     am i missing something obvious, or is this not available in audition ?
    No, that view (that I've always found rather annoying, myself) isn't available. But zooming in and out in Edit View is easily and rapidly achieved by more than one method, and once you've got used to it you'll not particularly want to go back, I suspect. Audition isn't a clone of Wavelab, and Adobe deliberately don't implement features in the same way as in other software unless there is absolutely no choice in the matter - which is rare.
    Incidentally, most people in your situations find replies like this quite annoying. Please don't take it personally - that's just the way it is with software; you get used to the way it works, or if you don't like it then get something else that does it for you. There is no universal paradigm for how an audio editor 'ought to' work, and neither should there be. But in this regard, I have to say that an awful lot of editors all over the world having to work fast in radio stations use Audition as the tool of choice - simply because editing on it is extremely intuitive and quick, without resorting to confusing multi-screen views.

  • 30GB 5G only recognised in Device Manager

    Hi,
    wondered if someone could help. Although new to the forum i have extensively read many of the other posts along with apple support and realise there is a problem with the 5G ipods and windows XP; however, no suggested solutions (even from apple, e.g. 5 R's) have worked. I do have Norton installed, however i have negated this problem already (see below).
    I have had a number of ipods connected to my computer (3G 15GB, Mini, 4G) and none have had a problem. to set up my latest ipod i firstly uninstalled all previous itunes and updaters, installing what was given on the CD and updating when prompted.
    Despite this, the ipod is not recognised in either, iTunes, My Computer, or disk management (so i can't even change the drive), and ipod updater comes up with 'service error'. the only place it is recongnised is device manager but with a yellow ? stating that the drivers are not installed.
    Now, i have tried it in other computers in the house all with XP pro and with ipods and itunes already installed. On all computers the ipod is recognised in both itunes and windows. futher negating possible conflicts i have used different leads, tried it on my other computer using Norton and all of these worked. This suggestes that the problem must be isolated to on my main workstation.... However, further confusing the issue all my other ipods work with the newly installed itunes on my main workstation! hum?
    ultimatley my problem is how to get windows to to recognise my 5G drivers?

    hiya!
    just checking to see where you are in the troubleshooting process.
    Despite this, the ipod is not recognised in either, iTunes, My Computer, or disk management (so i can't even change the drive), and ipod updater comes up with 'service error'. the only place it is recongnised is device manager but with a yellow ? stating that the drivers are not installed.
    following up on the Ipod Service Error, have you checked through these possibilities yet?
    iPod for Windows: Fast user switching in Windows XP is not supported
    iPod shows up in Windows but not in iTunes
    following up on the message about the drivers, have you seen the techniques in this MarkJones post yet?
    MarkJones: Re: Windows XP (SP2) Laptop only finds generic "New USB 2.0 Device"
    love, b

  • Device Manager for IDS/IPS 4215

    I am trying to view my IDS throught the web browser Device manager but am having trouble. I configured the sensor through the CLI. We are using the standard/default port 443. When I enter the https://ip address all I get is "can't display web page" . Does anybody have any tips or something I might have overlooked.
    Thanks

    Do you have Java runtime enviroment enabled
    Maybe IDM access is not working thanks Java problem
    Try following download java 1.4.2_07
    https://sdlc5b.sun.com/ECom/EComActionServlet;jsessionid=5BED10CBB25347782DC40CB6AE5ECDF1
    Download and install
    M.

  • Satellite Pro L300: WLAN is not in device manager and is missing

    Hi,
    I have a Toshiba L300 which I downgraded from Vista to WXP months ago. So I decided to stick with Vista and when I installed Vista the WLAN was missing in device manger and it didn't work. I tried downloading drivers adapters from Toshiba drivers download and still didn't work. Only my Ethernet is showing in device manager....btw I have a Realtek WLAN
    Also,my VGA graphics card doesn't seem to update driver and when it does it says that the system is below minimum specs.
    It's soo weird in WXP it was working fine..... Any solutions?

    >I tried downloading drivers adapters from Toshiba drivers download and still didn't work.
    What does it mean exactly? Have you installed WLAN driver or not? Is WLAN card installed properly and listed in device manager as Realtek WLAN card?
    How to understand you?
    Have you problems to install WLAN card or to configure WLAN connection?
    If the WLAN card is installed properly enable the card with WLAN switch and then use FN+F8 key combination and be sure card is set to ON.
    Which display driver you want to install? Which version?

Maybe you are looking for