Issue
What new user types and permissions are available within Network Management Card 2 (NMC2) AOS v6.X.X and higher?
Product Line
- Network Management Card 2 (NMC2) - AP9630/AP9630CH, AP9631/AP9631CH, AP9635/AP9635CH
Devices with an embedded Network Management Card 2 include (but are not limited to): 2G Metered/Switched Rack PDUs (AP86XX, AP88XX, AP89XX), Certain Audio/Video Network Management Enabled products.
Environment
- All serial numbers
- AOS firmware version v6.0.6 and and above (if you see the menu options Home, Status, Configuration, Control, etc at the top in a green bar, this is most likely v6.0.6 or higher)
Cause
v6.0.6 and higher AOS versions contain new user types defined by permissions. This article is intended to highlight each and define their respective permissions.
If you upgrade your NMC2 firmware from v5.1.X to v6.X.X, as noted in knowledge base article ID FA167693, your 5.1.X users (administrator, device, read-only) will transfer over to v6.X.X.
Along with new user types, multiple users of each type can be created and logged in to the NMC2 at the same time.
Resolution
Refer to the information below. regarding the types of users that can be created.
- Super User (NEW!) - The super user has full control of the NMC2. This user cannot be renamed, locked, or deleted. It can, however, be disabled.
- Administrator - An administrator has full control of the NMC2. A super user or administrator can manage another Administrator's account (enable, disable, change password, etc).
- Device - A device user has read-write access to the device-related menus only. The super user or an administrator can create, delete, enable, or disable a device user account.
- Read-only - A read-only user account has read-only access to view status but not to control a device or change any configured value. The super user or an administrator can create, delete, enable, or disable a read-only user account.
- Network-only (NEW!) - A network-only user has access to the Home page of the web interface and only network-specific elements only including the Status->Network page within the web UI and various network-specific CLI commands.
- Application specific - (i.e. Outlet user), if supported. - Certain applications may allow certain user types that have different permissions relating to device control. For example, on a Switched Rack PDU, an outlet user could be created and given access to control certain outlets.
For information regarding the addition of these new user types in bulk or via command line, please refer to knowledge base FA176542.