Configuration Guide for Cisco Optical Site Manager, IOS XR Release 26.x.x

PDF

Configuration Guide for Cisco Optical Site Manager, IOS XR Release 26.x.x

Create or edit an authorization group

Updated: October 14, 2026

Want to summarize with AI?

Log in

Use this procedure to create or edit an authorization group in Cisco Optical Site Manager. It helps you complete the required configuration, verification, or management action and confirm the result.

create, modify, or remove authorization groups, enabling you to manage user access and permissions efficiently within the network management application.

  • Create an authorization group.

  • Edit an authorization group.

Authorization groups help you manage user and group attributes used by authentication and authorization processes.

You manage authorization groups from the Devices area.

Before you begin

  • Log into Cisco Optical Site Manager

  • For Cisco Optical Site Manager device management, we strongly recommend to configure the authorization group with credentials for a local IOS XR user account on the managed device. The account must have write-capable NETCONF access, such as a root-lr user or equivalent.

    Use IOS XR credentials in this order of preference:

    1. A local IOS XR user account.

    2. If a TACACS+ account is required, configure a local user account with the same username, password, and privileges to ensure seamless management of the device even if TACACS server is not available.

    3. If TACACS+ authentication fails, Cisco Optical Site Manager can manage the device only when the TACACS+ and local user credentials match.

Follow these steps to manage authorization groups.

Procedure

  1. Click Devices in the left panel.

    The Device Configuration page appears.

  2. In the Devices area, click Authorization Group to expand it.

    The table lists all available authorization groups.

  3. Perform these steps, as needed.

    To perform these steps
    Create a new authorization group

    1. Click Add Auth Group.

      The Add Authorization Group dialog box appears.

    2. Enter values in the Auth Group Name, Remote User Name, and Remote Password fields.

    3. Click Add.

      The new authorization group is added to the table.
    Edit an authorization group

    1. Click Edit.

      The fields in the table are now editable.

    2. Update the Remote User Name and Remote Password fields, as needed.

    3. Click Apply.

      The authorization group is updated in the table.

The authorization group table reflects your changes.

Create or edit an SNMP group

Use Cisco Optical Site Manager to manage SNMP groups so you can connect to MPBC devices. Create or edit SNMP groups as needed to enable SNMP-based communication with the MPBC devices.

SNMP groups in Cisco Optical Site Manager define access and authentication methods for MPBC devices. Each group is identified by a unique combination of group name and security level. Ensure the corresponding SNMP configuration exists on the target MPBC device before creating a group. This task allows you to

  • create an SNMP group or

  • edit an SNMP group.

Before you begin

Log into Cisco Optical Site Manager.

Ensure the SNMP configuration is set up on the MPBC device prior to managing SNMP groups.

Follow these steps to create or edit an SNMP group.

Procedure

  1. Click Devices in the left panel.

  2. In the Devices tab, click Authorization Group to expand it.

  3. In the SNMP section, manage SNMP groups as follows:

    To Follow these instructions
    Create a new SNMP group

    1. Click Add SNMP Group.

      The Add SNMP Group dialog box appears.

    2. From the Security Level drop-down list, select the desired security level (for example, auth-no-priv).

    3. Fill in the SNMP Group Name, Remote Name, Authentication Type, and Authentication Remote Password fields.

    4. Click Apply.

      The new SNMP group is added to the table.
    Edit an existing SNMP group

    1. Click Edit next to the desired SNMP group.

      The fields become editable.

    2. Update the relevant fields (Remote Name, Security Level, Authentication Type, Authentication Remote Password) as needed.

    3. Click Apply.

      The changes are saved in the table.

Your changes are reflected in the SNMP group table.