Cisco Prime Nerk 43 User Guide
Have a look at the manual Cisco Prime Nerk 43 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 53 Cisco manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
B-7 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Events Client Permissions If the source of the ticket is in your scope, you can view the ticket in the ticket table, view ticket properties, filter tickets, and perform actions on the ticket. By default, users with the Administrator role have access to all managed elements and can perform any action on tickets. To change the Administrator user scope, see the topic on device scopes in the Cisco Prime Network 4.3.2 Administrator Guide. The following table identifies the roles required to perform the high level tasks: Events Client Permissions This topic identifies the roles that are required to work with the Events client. Prime Network determines whether you are authorized to perform a task as follows: For GUI operations that do not affect elements, authorization is based on the default permission that is assigned to your user account. For NE operations (tasks that do affect elements), authorization is based on the default permission that is assigned to your account. That is, whether the element is in one of your assigned scopes and whether you meet the minimum security level for that scope. Change and Configuration Management (CCM) Permissions NoteIn CCM, the user role always takes precedence over the device scope security level. Task Viewer Operator OperatorPlus Configurator Administrator Acknowledge/deacknowledge tickets — — X 1 1. In addition, the security level for the device scope must be OperatorPlus or higher for the device that holds the root alarm for a ticket. XX Add notes to a ticket — — X 1XX Clear and remove tickets — — X 1XX Clear tickets — — X 1XX Filter tickets X X X X X Find affected elements X X X X X Remove tickets — — X 1XX View ticket properties X X X X X View tickets XXXXX Task Minimum GUI Access RoleMinimum Device Scope Security Level Dashboard Access top families Viewer Viewer Access configuration sync status Viewer Viewer Access configuration changes in the last week Viewer Viewer
B-8 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Change and Configuration Management (CCM) Permissions Access most recent configuration changes Viewer Viewer Configuration Management View configuration archives Viewer Viewer View files in archive Viewer N/A Compare files in archive Viewer N/A Compare the latest configuration in device Viewer OperatorPlus Synchronize configurations Viewer Configurator Back up (copy) files from devices to archive Viewer OperatorPlus Restore files from archive to devices Configurator Configurator Edit configuration files before restoring them to devices Configurator Configurator Edit the edited archive version of configuration files and restore them to devicesConfigurator Configurator View configuration change logs Viewer Viewer Delete configuration files from archive Configurator N/A Manage labels for archive files 1Configurator N/A Add and edit comments for archive file Configurator N/A Export configuration files from archive Configurator N/A Edit configuration file from archive Configurator N/A Edit configuration file and restore it to device Configurator N/A Restore the edited archive versions of configuration file to deviceConfigurator N/A Restore configuration files Viewer N/A Image Management Upload software image from device to repository Configurator OperatorPlus Distribute images Configurator Configurator Activate and deactivate images Configurator Configurator Commit image changes Configurator Configurator Rollback images Configurator Configurator View images in repository Viewer N/A Add package Configurator Configurator Add images to repository Configurator N/A Delete images from repository Configurator N/A Import images from device Configurator OperatorPlus Managing Device Groups Create device groups Configurator Configurator Edit device group details Configurator Configurator Delete device groups Configurator N/A Task Minimum GUI Access RoleMinimum Device Scope Security Level
B-9 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Permissions for Business Tags and Business Elements (Vision and Events Clients) Permissions for Business Tags and Business Elements (Vision and Events Clients) Business Tags—NEs in User’s Scope Compliance Audit Create policies Configurator N/A Create policy profiles Operator N/A Execute audit job Operator Operator View audit job results Operator Operator Execute a Fix job NoteTo execute a fix job, the device-level role of the user must be Configurator or Administrator. The role of the user for a device overrides the role of a user on Prime Network.Configurator OperatorPlus View the fix job results 2Configurator OperatorPlus Configuration Audit Define configuration policies Configurator Configurator Schedule configuration audit Configurator Configurator View configuration audit jobs and audit results OperatorPlus OperatorPlus Global Tasks Vi ew j o b s Vi ew e r N / A Administer jobs (suspend, delete, and so forth) 2Configurator N/A Change settings Configurator N/A 1. Configuration files are filtered according to the device scope of a user. 2. Users with Viewer, Operator, and OperatorPlus roles can view only their own jobs; Users with Configurator role can view and manage their own jobs; Administrators can view and manage all jobs. If a user role is modified in Prime Network, you need to logout from CCM and then login again for the changes to get effect. For information on how Prime Network performs user authentication and authorization, including an explanation of user access roles and device scopes, see the Cisco Prime Network 4.3.2 Administrator Guide. Task Viewer Operator OperatorPlus Configurator Administrator Attach a business tag — — — Partial 1X Detach a business tag — — — Partial 1X Search for a business tag — — — Partial 1X Task Minimum GUI Access RoleMinimum Device Scope Security Level
B-10 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Reports Permissions (Vision and Events Clients) Business Tags—Devices Not in User’s Scope (or Actions Not Related to NEs) ) Reports Permissions (Vision and Events Clients) Reports—NEs in User’s Scope Reports—NEs Not in User’s Scope (or Actions Not Related to NEs) View business tag properties — — — Partial1X Rename a business element X X X X X Delete a business element X X X X X 1. Configurator user role default permission supports the action for business elements, which do not have scopes. The Configurator user role default permission supports the action for elements only if the elements are in the user’s scope. Task Viewer Operator OperatorPlus Configurator Administrator Attach a business tag — — — Partial 1 1. Configurator user role default permission supports the action for business elements, which do not have scopes. The Configurator user role default permission supports the action for elements only if the elements are in the user’s scope. X Detach a business tag — — — Partial 1X Search for a business tag — — — Partial 1X View business tag properties — — — Partial 1X Rename a business element X X X X X Delete a business element X X X X X Task Viewer Operator OperatorPlus Configurator Administrator Generate Events Reports Detailed Network Events Reports1 1. Detailed Ticket reports include only those tickets that have a root cause alarm associated with an element in the user’s scope. XXXXX Detailed Non-Network Events Reports — — — Partial2 2. A user with the Configurator role can generate Detailed Provisioning Events reports for elements that are in and outside their scope. X All other events reports X X X X X Generate Inventory Reports X X X X X Generate Network Service Reports X X X X X Task Viewer Operator OperatorPlus Configurator Administrator Generate Events Reports Detailed Network Events Reports — — — — X Task Viewer Operator OperatorPlus Configurator Administrator
B-11 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Technologies and Services Permissions Reports—Generated by User Reports—Generated by Other Reports—Report Folders Technologies and Services Permissions These topics provides tables that list the permissions that are required to perform operations on devices that have the technologies or services configured on them. Permissions for Managing Carrier Ethernet, page B-12 Permissions for Managing Carrier Grade NAT, page B-15 Detailed Non-Network Events Reports — — — Partial1X All other events reports — — — — X Generate Inventory Reports — — — — X Generate Network Service Reports — — — — X 1. A user with the Configurator role can generate Detailed Provisioning Events reports for elements that are in and outside their scope. Task Viewer Operator OperatorPlus Configurator Administrator Schedule reports X X X X X Cancel reports X X X X X Delete reports X X X X X Export reports X X X X X Rename reports X X X X X Save reports X X X X X Set report preferences for purging and sharing — — — — X Share/unshare reports X 1 1. You can share or unshare reports only if sharing is enabled in the Administration client. X1X1X1X View report properties X X X X X View reports X X X X X Task Viewer Operator OperatorPlus Configurator Administrator All tasks — — — — X Task Viewer Operator OperatorPlus Configurator Administrator All tasks — — — — X Task Viewer Operator OperatorPlus Configurator Administrator
B-12 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Technologies and Services Permissions Permissions for Managing DWDM, page B-16 Permissions for Using Ethernet OAM Tools, page B-16 Permissions for Managing Y.1731 IPSLA, page B-16 Permissions for Managing MPLS Services, page B-17 Permissions for Managing IP and MPLS Multicast, page B-19 Permissions for Managing MToP, page B-19 Permissions for Managing SBCs, page B-19 Permissions for Managing AAA, page B-20 Permissions for Managing IP Pools, page B-21 Permissions for Managing BNG, page B-21 Permissions for Managing Mobile Technologies, page B-22 Permissions for Managing Data Center Networks, page B-24 Permissions for Managing Cable Technologies, page B-25 Permissions for Managing DSL2+ and VDSL2, page B-26 Permissions for Managing Carrier Ethernet Carrier Ethernet—NEs in User’s Device Scope Task Viewer Operator OperatorPlus Configurator Administrator Adding Elements to a Map Add associated VLANs to a map — — X X X Add EFP cross-connects — — X X X Add Ethernet services to a map — — X X X Add pseudowires to a map — — X X X Add unassociated bridges — — X X X Add VLANs to a map — — X X X Add VPLS instances to a map — — X X X Viewing Element Properties View access gateway properties X X X X X View associated network VLAN service links and VLAN mapping propertiesXX X X X View CDP properties X X X X X View EFD properties X X X X X View EFP cross-connect properties X X X X X View EFP properties X X X X X View Ethernet flow domains X X X X X View Ethernet LAG properties X X X X X View Ethernet service properties X X X X X
B-13 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Technologies and Services Permissions View EVC service properties X X X X X View IP SLA responder service properties X X X X X View IS-IS properties X X X X X View Link Layer Discovery Protocol (LLDP) properties X X X X X View mLACP properties X X X X X View OSPF properties X X X X X View Provider Backbone Bridge (PBB) properties X X X X X View pseudowire properties X X X X X View pseudowire redundancy service properties X X X X X Viewing the PW-HE configuration X X X X X View REP properties X X X X X View REP properties for VLAN service links X X X X X View HSRP properties X X X X X View STP properties X X X X X View STP properties for VLAN service links X X X X X View VLAN bridge properties X X X X X View VLAN links between VLAN elements and devices X X X X X View VLAN mappings X X X X X View VLAN service link properties X X X X X View VLAN trunk group properties X X X X X View VPLS access EFP properties X X X X X View VPLS core or access pseudowire endpoint properties X X X X X View VPLS instance properties X X X X X Vi ew V S I p r o p e r t i e s X X X X X Working with Overlays Apply overlays X X X X X Display or hide overlays X X X X X Remove overlays X X X X X View pseudowire tunnel links in VPLS overlays X X X X X View REP information in VLAN domain views and VLAN overlaysXX X X X View STP information in VLAN domain views and VLAN overlaysXX X X X Other Tasks Display pseudowire information — — — X X Ping a pseudowire — — — X X Remove VLANs from a map — — X X X Rename Ethernet flow domains X X X X X Task Viewer Operator OperatorPlus Configurator Administrator
B-14 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Technologies and Services Permissions Carrier Ethernet—NEs Not in User’s Device Scope (or Actions Not Related to NEs) Using REP and mLACP Show Commands — — — X X Using Pseudowire Ping and Show Commands — — — X X Task Viewer Operator OperatorPlus Configurator Administrator Adding Elements to Maps Add associated VLANs to a map — — X X X Add EFP cross-connects — — X X X Add Ethernet services to a map — — X X X Add pseudowires to a map — — X X X Add unassociated bridges — — X X X Add VLANs to a map — — X X X Add VPLS instances to a map — — X X X Viewing Element Properties View access gateway properties — — — — X View associated network VLAN service links and VLAN mapping properties—— — — X View CDP properties — — — — X View EFD properties — — — — X View EFP cross-connect properties Partial 1Partial1Partial1Partial1X View EFP properties Partial 1Partial1Partial1Partial1X View Ethernet flow domains X X X X X View Ethernet LAG properties — — — — X View Ethernet service properties X X X X X View EVC service properties — — — — X View IP SLA responder service properties — — — — X View IS-IS properties — — — — X View Link Layer Discovery Protocol (LLDP) properties — — — — X View mLACP properties — — — — X View OSPF properties — — — — X View Provider Backbone Bridge (PBB) properties — — — — X View pseudowire properties Partial 1Partial1Partial1Partial1X View pseudowire redundancy service properties Partial 2Partial2Partial2Partial2 Viewing the PW-HE configuration — — — — X View REP properties — — — — X View REP properties for VLAN service links — — — — X Task Viewer Operator OperatorPlus Configurator Administrator
B-15 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Technologies and Services Permissions Permissions for Managing Carrier Grade NAT Carrier Grade NAT—NEs in User’s Device Scope View STP properties — — — — X View STP properties for VLAN service links — — — — X View HSRP properties — — — — X View virtual service instance properties — — — — X View VLAN bridge properties — — — — X View VLAN links between VLAN elements and devices Partial 3Partial3Partial3Partial3X View VLAN mappings — — — — X View VLAN service link properties — — — — X View VLAN trunk group properties — — — — X View VPLS access EFP properties — — — — X View VPLS core or access pseudowire endpoint properties — — — — X View VPLS instance properties X X X X X Working with Overlays Apply overlays X X X X X Display or hide overlays X X X X X Remove overlays X X X X X View pseudowire tunnel links in VPLS overlays — — — — X View REP information in VLAN domain views and VLAN overlays—— — — X View STP information in VLAN domain views and VLAN overlays—— — — X Other Tasks Display pseudowire information — — — — X Ping a pseudowire — — — — X Remove VLANs from a map — — X X X Rename Ethernet flow domains X X X X X Using REP and mLACP Show Commands — — — X X Using Pseudowire Ping and Show Commands — — — X X 1. The user can view properties available via Node>Properties but not those available via the right-click Properties option or in logical inventory. 2. The user can view the pseudowire redundancy icon in the navigation and map panes, but not the inventory or properties window. 3. The user can view links, but the links are dimmed and do not indicate their status. Task Viewer Operator OperatorPlus Configurator Administrator View Carrier Grade NAT properties X X X X X Using CG NAT Configure, Delete, and Show Commands — — — X X Task Viewer Operator OperatorPlus Configurator Administrator
B-16 Cisco Prime Network 4.3.2 User Guide Appendix B Permissions Required to Perform Tasks Using the Prime Network Clients Technologies and Services Permissions Carrier Grade NAT—NEs Not in User’s Device Scope (or Actions Not Related to NEs) Permissions for Managing DWDM DWDM—NEs in User’s Device Scope DWDM—NEs Not in User’s Device Scope (or Actions Not Related to NEs) Permissions for Using Ethernet OAM Tools Ethernet OAM Tools—NEs in User’s Device Scope Ethernet OAM Tools—NEs Not in User’s Device Scope (or Actions Not Related to NEs) Task Viewer Operator OperatorPlus Configurator Administrator View Carrier Grade NAT properties — — — — X Using CG NAT Configure, Delete, and Show Commands — — — X X Task Viewer Operator OperatorPlus Configurator Administrator Vi ew DW D M p r o p e r t i e s X X X X X View G.709 properties X X X X X View performance monitoring configuration information X X X X X Using IPoDWDM Configuration and Show Commands — — — X X Task Viewer Operator OperatorPlus Configurator Administrator Vi ew DW D M p r o p e r t i e s — — — — X View G.709 properties — — — — X View performance monitoring configuration information — — — — X Using IPoDWDM Configuration and Show Commands — — — X X Task Viewer Operator OperatorPlus Configurator Administrator View CFM properties X X X X X View Ethernet LMI properties X X X X X Use CFM, E-LMI, and L-OAM commands — — — X X Task Viewer Operator OperatorPlus Configurator Administrator View CFM, E-LMI, L-OAM properties — — — — X Use CFM, E-LMI, and L-OAM commands — — — X X