Process to grant/restrict a user to use only cut-through permissions (use only the Cut-through function of the software)

Products

• VMware Smart Assurance

Issue/Introduction

Article provides an overview of how to grant/restrict a user to use only cut through permissions in Network Configuration Manager (NCM). 

It can be important to restrict certain users to only being able to do certain actions for security purposes. 

Environment

NCM 10.1.X

Resolution

To grant user permissions that restrict a Smarts NCM user to use only the Smarts NCM Cut-through command, do the following:

• Log into the Smarts NCM user interface.
• Access System Administration Console by selecting the Tools from the navigation bar or by pressing F4.
• In the System Administrator screen navigate to the System users under System Administration Global User Management.
• In the right panel select the user you want to grant access to perform Cut-through permissions on and then click on Permissions in the lower left corner next to "Groups".
• An Access Control Administration screen will present itself and will have 4 groups of permissions to manage System, Network, Workspace, and Device. These should be set as follows:
  • System Permissions-  Nothing checked
  • Network Permissions -
     
• Make sure the network where the user needs to perform the cut-through is a selected resource. This is done by clicking on Network Permissions on the left panel, and clicking Manage in the lower right hand corner of the right panel.
• Select the network in the left panel and on the right panel, check the following permissions (only check the following listed):
  • Under Network- View should be checked
  • Under Device Edit; Manage OS; Run Cut-throughs should be checked
  • Under Job - Nothing should be checked.
  • Under View - Nothing should be checked.
     
• Workspace Permissions - Default or if you have created a workspace this must be configured:
  • Under Workspace - View should be checked.
  • Under Device - Run Cut-Throughs, Manage OS, Edit should be checked.
  • Under Job nothing should be checked. 
• Device Permissions Nothing selected