Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[STRM] How to Create Users accounts with Restricted access

0

0

Article ID: KB13565 KB Last Updated: 16 Mar 2009Version: 1.0
Summary:
How to create a User role with access to specific Sensor devices
Symptoms:
How do I create a user that has access to logs from few sensor devices?
Solution:
To Create a User Role that has access to specific Sensor devices, enable "Event Permission Precedence".  This will restrict user access to device logs.

Note - This option is available only for STRM version 2008.3 and above

To Enable the "Event Permission Precedence":
  1. Login to STRM WebUI using Admin account
  2. Go to Config > Console
  3. Under Authentication Settings, select one of the options for "Event Precedence Settings":
    • Networks Only - User roles restriction to Network Hierarchy
    • Devices only - User roles restriction to Sensor Devices
    • Network and Devices -  User role restriction to Network Hierarchy and Sensor devices
    • None - User roles are not tied to network hierarchy and sensor devices (this is default)
Next, create user roles with permissions for Sensor devices/ Network Hierarchy

To Create User roles
  1. Login to STRM WebUI using Admin account
  2. Go to Config > User Roles
  3. Click Create Role
  4. Assign Role name and select the options you want to enable the users to see
  5. On the Next Page you can select the sensor devices this user role will have access to - all the users who have this role will be restricted to logs/events from these devices


Note - Users with custom role will still Offenses from all the sensor devices. The restriction is only for events and flows.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search