ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

When Disabling Telnet in Spectrum OneClick Privileges the SSH option is also disabled. Need SSH without Telnet as an option.


Article ID: 237289


Updated On:


CA Spectrum DX NetOps


Customer requires Telnet to be disabled on ALL devices.  Customer still wants the ability to SSH into a device.  The issue, when you Disable Telnet from the Privileges role of a User/User Group you also Disable the SSH option as well.

We need SSH as an option regardless of having Telnet disabled. 


Both the Telnet and SS functions are controlled by the same OneClick Privilege.


Release : Any

Component : Spectrum OneClick


Edit the $SPECROOT/tomcat/webapps/spectrum/WEB-INF/topo/config/topo-app-config.xml and comment out or remove the privilege for SSH.

    <item name="">

Additional Information

The default SPECROOT/tomcat/webapps/spectrum/WEB-INF/topo/config/topo-app-config.xml file must be edited for this to work. It sill not work by copying the topo-app-config.xml file to the $SPECROOT/custom/topo/config directory and then editing that file.

Since this is a modification to an out of the box default file an upgrade of Spectrum may overwrite this file.