System Setup and Software Installation Guide for Cisco Optical Site Manager, IOS XR

PDF

System Setup and Software Installation Guide for Cisco Optical Site Manager, IOS XR

User management features in the Admin Plane

Want to summarize with AI?

Log in

This topic explains how user management profiles organize access and authorization in the Admin Plane for Cisco Optical Site Manager platforms.


Starting with Release 26.1.1, the Cisco Optical Site Manager Admin Plane supports a multi-user, multi-session environment. While a single Superuser is defined during the initial installation and retains full administrative privileges, you can now add multiple additional users to the system. Each of these users is assigned a predefined profile that dictates their specific access rights, ensuring consistent and secure authorization management.

Note

For the user management feature to take effect, you must update the card controller when you upgrade from Release 25.1.1 to 26.1.1 from the COSM node that is onboarding the NCS 2000 device where the SVO-LC is inserted. Refer to Activate NCS 1000 and NCS 2000 device software.

Table 1. Feature History

Feature Name

Release Information

Feature Description

Admin Plane user management enhancements

Cisco NCS 2000 26.1.1

The Admin Plane in Cisco NCS 2000 has been enhanced to support improved multi-user management and authorization capabilities. The new features include:

  • Multiple users can be defined in addition to the Superuser.

  • Different users can be logged in to the Admin Plane simultaneously (multi-user / multi-session).

  • Each user is associated with a predefined profile that grants specific authorizations.

  • Available profiles include Admin, Operator, and Viewer, each with tailored permissions.

Limitations of user management

Consider these important limitations when managing users on the SVO-LC platform.

  • Created users exist only on the SVO-LC host that runs the Admin Plane.

  • There is no automatic alignment of users between two Admin Planes in HA. Because each SVO-LC operates as a separate server, you must create and manage users independently on each card.

  • The “Reset to Factory” and “Reset to Install” operations also delete user data.


Create and manage user accounts in Admin Plane

This task enables administrators to create new user accounts in the Admin Plane, allowing for secure and role-based access to the system. By assigning appropriate roles, Admin, Operator, or Viewer.

Before you begin

Log into the Cisco Optical Site Manager Admin Plane

Log in as the super user to create the first admin user. Subsequently, you can log in as the admin user to create additional users.

Procedure

  1. Click Users in the left panel.

    The Users Management panel appears. This panel is available only to the Admin users.

  2. Click the + icon.

  3. In the Create Users dialog box:

    1. Enter the Username, Password, and Confirm Password.
    2. From the Profile drop-down list, select the appropriate profile.
      • ADMIN: Manages system-wide settings and user accounts with full privileges. This user can create, delete, and reset passwords for all users.

      • OPERATOR: Manages COSM virtual nodes on the SVO-LC instance, including creation, deletion, and memory configuration. This user can also create, delete, edit memory, restart, and perform switchovers on COSM instances.

      • VIEWER: Accesses system information with read-only permissions. No operations or modifications are permitted.

    3. Click Submit.
      Note

      Once a profile is assigned to a user, it cannot be changed.

      The user account is created, and the new user appears in the Users Management panel with the assigned profile.
  4. (Optional) Click the Delete icon in that row to delete a user account.

  5. (Optional) Click the Password reset icon in that row. Then enter and confirm the new password.