Cisco Cloud Control Administration

Select and choose Admin Console.

By default, Users is displayed.

Select Manage users > Add user.

In Add user, complete these steps:

To grant this user access to Nexus Dashboard, complete the steps in Configure Nexus Dashboard access.

Select and choose Admin Console.

Use Search to find a user by name or email address.

Select the products and roles you want to use to filter the table entries.

In Display name, select a user’s link to view their details.

Select and choose Admin Console.

Select , then select one of these options:

Select and choose Admin Console.

Select to customize the table density and column settings.

Select and choose Admin Console.

Select Manage users > Manage Nexus Dashboard access.

To change the settings for a user who already has access to Nexus Dashboard, select > Manage assignment. Then proceed to the role assignment step.

Select Assign.

In Assign user, complete these steps:

Select and choose Admin Console.

By default, Users is displayed.

Select Tenants.

Find a tenant:

Review the tenant information:

Select and choose Admin Console.

By default, Users is displayed.

Select Tenants.

Select Group tenants.
Cisco Cloud Control displays the tenants associated with the product you authenticated through.

Enter a name for the tenant group you are creating.

Select Add tenants to specify the tenants you want to group.
You must select at least two tenants.

If you see displayed for a tenant, this indicates the tenant currently belongs to another group. If you move it to the group you are creating, its existing Cisco Cloud Control data and settings won’t transfer over.

You can select multiple tenants for these products:

Click Add.

When adding a tenant to a group for the first time, you may need to select Sign in to sign in to each individual tenant. This sign-in step authenticates your identity across different product environments and obtains the necessary tokens.

Check the check box to accept the tenant settings you entered.

Select Save.

When tenants are grouped, Cisco Cloud Control uses one tenant ID as the primary identifier. Cisco Cloud Control does not automatically delete the IDs of the other tenants that joined the group.

Select and choose Admin Console.

By default, Users is displayed.

Select Tenants.

For the group you want to add tenants to, select > Add tenants.

Select Add tenants to specify the tenants you want to group.

If you see displayed for a tenant, this indicates the tenant currently belongs to another group. If you move it to this group, its existing Cisco Cloud Control data and settings won’t transfer over. You can select multiple tenants for these products:

Click Add.

When adding a tenant to a group for the first time, you may need to select Sign in to sign in to each individual tenant. This sign-in step authenticates your identity across different product environments and obtains the necessary tokens.

Check the check box to accept the tenant settings you entered.

Select Save.

Select and choose Admin Console.

By default, Users is displayed.

Select Tenants.

For the tenant group you want to rename, select > Rename.

Enter a new name for the tenant group, then select Save.

You invite the administrator for another product by setting them up as a Cisco Cloud Control user.

That administrator adds their product tenant to your tenant group.

Select and choose Admin Console.

By default, Users is displayed.

Select Domains.

Select Add a domain.

Enter your domain or subdomain name and select Add domain.

Copy the verification token into your DNS TXT record.

Choose who adds the DNS TXT record:

Select Done.

Your domain appears in your list of domains with the status Pending. When it’s verified, the status changes to Verified.

After the domain is verified, the TXT record is no longer required, and you can remove the verification token from your DNS server.

If verification fails, the error is cached by your DNS server. Your DNS server clears the cache after the time specified in the Time To Live (TTL) setting. You must wait to try again after the DNS server clears the cache. You can add the verification token again and request verification for the domain.

Select and choose Admin Console.

Select Identity Providers.

Select Add an IdP.

In Add an Identity Provider, select SAML as your IdP and select Next.

Select one of these methods to connect your IdP:

If you selected Fill out configuration form:

If you selected Upload your IdP’s metadata:

(Optional) Configure SAML attributes and settings.

By default, the SAML IdP uses the uid attribute to identify the user when it sends authentication data to Cisco Cloud Control. If the IdP supports other NameID configurations, you can modify this configuration.

Select Add IdP.

If this is the first IdP you have configured, the IdP is saved as your default IdP, and a default routing rule is created.

Select and choose Admin Console.

Select Identity Providers.

Select Add an IdP.

In Add an Identity Provider, select OpenID Connect as your IdP and select Next.

Enter your IdP information.

Select one of these methods to add endpoints:

(Optional) Check Allow the session to automatically sign out if you want to enable automatic sign-out.

Select Add IdP.

If this is the first IdP you have configured, the IdP is saved as your default IdP, and a default routing rule is created.

Select and choose Admin Console.

Select Identity Providers.

Select Routing rules > Add a routing rule.

Provide these details for a routing rule:

Select Add.

Select > Activate.

For any routing rule that has been created, you can select and complete these tasks:

Select and choose Admin Console.

By default, Users is displayed.

Select Audit Log.

Filter and customize the information that the audit log displays:

Select a log file’s date and time to view its details.

If a user does not have a display name configured in CUI, the system defaults to their email address.

You can also:

Select and choose Admin Console.

Select Audit Log.

Select Generate report to download the audit log data as a CSV file.