Manage Users
From the main menu, select User Management window. Using this window, you can add a new user, edit the settings for an existing user, delete a user from the network, and create user roles.
to display theNote |
Before you can create a new user that does not have admin-level access to Cisco Crosswork Optimization Engine functionality, you must first create a new role that limits the features they can access. See Define Role Settings for more information. Only a local admin user can add, update, and delete other local user accounts. A TACACS+ user, regardless of role assigned, will not be able to manage local users. |
Administrative Users Created During Installation
During installation, Cisco Crosswork Optimization Engine creates two special administrative IDs:
-
The virtual machine administrator, with the username cw-admin, and the default passwordcw-admin . Data center administrators use this ID to log in to and troubleshoot the VM hosting the Cisco Crosswork Optimization Engine server.
-
The Crosswork administrator, with the username admin and the default password admin. Product administrators use this ID to log in to and configure the Cisco Crosswork Optimization Engine user interface, and to perform special operations, such as creating new user IDs.
The default password for both administrative user IDs must be changed the first time they are used. You can also change the Crosswork administrator password using the following methods:
-
Log in as the admin user and edit the admin user password, as explained in Edit Users.
-
Enter the following command:
admin(config)# username admin <password>
Add Users
Follow the steps below to create a new Cisco Crosswork Optimization Engine user ID.
The user ID's user name must be unique. You cannot create a new user ID with the same user name as an existing user ID.
The special administrative user names admin (for administering Cisco Crosswork Optimization Engine) and cw-admin (for administering the virtual machine hosting the product) are created during installation and are reserved for those purposes (see Administrative Users Created During Installation).
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the User Management tab. |
Step 2 |
Click to open the Add New User dialog box. |
Step 3 |
Enter the following information for the user you are adding:
|
Step 4 |
From the Select Role drop-down at the bottom of the dialog box, choose the role that you want to assign to the user. See Define Role Settings for more information. |
Step 5 |
Click Add. |
Edit Users
Users with administrator privileges can edit any user ID's User Name, First Name, Last Name, and Role.
Administrators cannot change a user's password by editing the user ID. Users can change their passwords by logging in, clicking , and selecting Change Password.
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the User Management tab. |
Step 2 |
Click on the user ID whose settings you want to update, then click to open the Edit User dialog box. |
Step 3 |
Make the necessary updates to the user ID. |
Step 4 |
Click Update to save your changes. |
Delete Users
Follow the steps below to delete an existing user ID.
The administrative user IDs admin and cw-admin created during installation cannot be deleted (see Administrative Users Created During Installation).
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the User Management tab. |
Step 2 |
Click on the user ID you want to delete, then click . TheDelete Username User dialog displays. |
Step 3 |
Click Delete to confirm deletion. |
Create User Roles
Local users with administrator privileges can create new users as needed (see Add Users).
Users created in this way can perform only the functions or tasks that are associated with the user role they are assigned.
The local admin role enables access to all functionality. It is created during installation and cannot be changed or deleted. However, its privileges can be assigned to new local users. Only local users can create or update user roles; TACACS users cannot.
Follow the steps below to create a new user role.
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the Role Management tab. |
Step 2 |
Click to display the Add Role dialog box. |
Step 3 |
Enter a unique name for the new role and then click Add. |
Step 4 |
Define the user role's privilege settings:
|
Step 5 |
When you are finished, click Save to create the new role. To assign the new user role to one or more user IDs, edit the Role setting for the user IDs (see Edit Users). |
Edit User Roles
Users with administrator privileges can quickly change the privileges of any user role other than the default admin role.
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the Role Management tab. |
Step 2 |
Click on an existing role to select it. The Role Management tab displays the user role's settings. |
Step 3 |
Define the role's settings:
|
Step 4 |
When you are finished, click Save to save your changes. |
Clone User Roles
Cloning an existing user role is the same as creating a new user role (see Create User Roles), except that you need not set privileges for it. If you like, you can let the cloned user role inherit all the privileges of the original user role.
Cloning user roles is a handy way to create and assign many new user roles quickly. Following the steps below, you can clone an existing role multiple times. Defining the cloned user role's privileges is an optional step; you are only required to give the cloned role a new name. If you like, you can assign it a name that indicates the role you want a group of users to perform. You can then edit the user IDs of that group of users to assign them their new role (see Edit Users). Later, you can edit the roles themselves to give users the privileges you want (see edit user roles).
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the Role Management tab. |
Step 2 |
Click on an existing role to select it. |
Step 3 |
Click to display the Clone Role dialog box. |
Step 4 |
Enter a unique name for the cloned role and then click Clone. |
Step 5 |
(Optional) Define the role's settings:
|
Step 6 |
Click Save to create the newly cloned role. |
Delete User Roles
Users with administrator privileges can delete any user role that is not the default admin user role or that is not currently assigned to a user ID. If you want to delete a role that is currently assigned to one or more user IDs, you must first edit those user IDs to assign them to a different user role.
Procedure
Step 1 |
From the main menu, choose .The User Management window opens. If it is not already displayed, click the Role Management tab. |
Step 2 |
Click on the role you want to delete, to select it. |
Step 3 |
Click to display the Delete Role dialog box. |
Step 4 |
Click Delete to confirm that you want to delete the user role. |