Cisco Optical Network Planner Configuration Guide, Releases 26.x.x

User roles in Cisco ONP

Updated: March 9, 2026

Want to summarize with AI?

On this page

Overview

Grant access to a new user
Remove access to a user
Delete a user
Lock and unlock an individual user account

Overview

Provides details about the predefined user roles available in Cisco ONP, including granting or removing access, deleting users, and locking or unlocking individual user accounts.

Cisco ONP uses user roles to control access and assign responsibilities within the platform. This table outlines the default roles, their capabilities, and any special group assignments.

Table 1. Roles and responsibilities
Roles	Capabilities and responsibilities
Administrator	Activate new users and grant access. Assign roles to user groups. Manage predefined user groups (cannot edit or delete these groups). Assign actions permissions to each group.
Designer	Create network topologies (manually or by import). Assign fibers between site. View reports shared by others. Limitations: Designers cannot analyze networks but can view reports shared by others after analysis.
Planner	Design and analyze networks. Create sites, fiber spans, and service demands. Evaluate network performance.
Reader	View users, groups, roles, permissions, topology, layout, connections, and BOM. By default, users are assigned to the READ_ONLY_GROUP with the role called READER_ROLE.

To create a new role, see Create a new role.

Under Control Panel > Roles and Control Panel > Permissions, you can view the permissions applicable for each role and the actions that can be performed for each permission.

Grant access to a new user

All users with the admin role receive an email notification about new user registration.

Follow these steps to assign a role to a user group:

Before you begin

Procedure

Click Control Panel.

The Access Control Management page appears.

You can change the state of a user from INACTIVE to ACTIVE in either of two ways.

From the State field, click INACTIVE in the respective user row.
Select a user row or multiple user rows and click Update.
- In the Update User dialog box, select the Group and State from the respective drop-down lists.
- Click Save.

Click OK in the Success dialog box.

Note

After your access is granted by the admin, you receive an email notification at your registered email address. ou can log in after you get this email.

The admin assigns a Role and Group to a newly created user. These assignments determine what actions the user can perform.

Remove access to a user

This section helps you to securely revoke a user's access for security, compliance, or resource management reasons.

Follow these steps to remove Cisco ONP access to a user.

Before you begin

Procedure

Click Control Panel.

The Access Control Management page appears.

Change the state of a user from ACTIVE to INACTIVE in either of two ways:

In the State field, click ACTIVE in the user's row.
Select a user row or multiple user rows, and click Update.
- In the Update User dialog box, select the Group and State from the drop-down lists.
- Click Save.

In the Success dialog box, click OK.

Delete a user

Follow these steps to delete a user or multiple users.

Before you begin

Procedure

Click Control panel.

The Access Control Management page appears.

Delete a user:

Select the user or multiple users to be deleted under the USERS tab, and click Delete.
Click Yes in the Warning dialog box.

The message User deleted successfully appears.

Lock and unlock an individual user account

This procedure enables administrators to ensure that only authorized users can access the system.

Before you begin

Procedure

Click Control Panel.

The Access Control Management page appears.

Click the USERS tab.

Select the user whose account you want to lock or unlock.
Click Lock to lock the user account, or click Unlock to unlock the account.

If your account is locked, contact your administrator to unlock your account.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.