Cisco Identity Services Engine Hardware Installation Guide, Release 2.0

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Cisco Identity Services Engine Hardware Installation Guide, Release 2.0

Chapter Title

Manage Administrator Accounts

Results

Updated:
January 28, 2020

Chapter: Manage Administrator Accounts

Manage Administrator Accounts

Differences Between CLI Admin and Web-Based Admin Users Tasks

The username and password that you configure when using the Cisco ISE setup program are intended to be used for administrative access to the Cisco ISE CLI and the Cisco ISE web interface. The administrator that has access to the Cisco ISE CLI is called the CLI-admin user. By default, the username for the CLI-admin user is admin and the password is user-defined during the setup process. There is no default password.

You can initially access the Cisco ISE web interface by using the CLI-admin user’s username and password that you defined during the setup process. There is no default username and password for a web-based admin.

The CLI-admin user is copied to the Cisco ISE web-based admin user database. Only the first CLI-admin user is copied as the web-based admin user. You should keep the CLI- and web-based admin user stores synchronized, so that you can use the same username and password for both admin roles.

The Cisco ISE CLI-admin user has different rights and capabilities than the Cisco ISE web-based admin user and can perform other administrative tasks.

Table 1. Tasks Performed by CLI-Admin and Web-Based Admin Users

Admin User Type

Tasks

Both CLI-Admin and Web-Based Admin

  • Back up the Cisco ISE application data.

  • Display any system, application, or diagnostic logs on the Cisco ISE appliance.

  • Apply Cisco ISE software patches, maintenance releases, and upgrades.

  • Set the NTP server configuration.

CLI-Admin only

  • Start and stop the Cisco ISE application software.

  • Reload or shut down the Cisco ISE appliance.

  • Reset the web-based admin user in case of a lockout.

  • Access the ISE CLI.

Create a CLI Admin

Cisco ISE allows you to create additional CLI-admin user accounts other than the one you created during the setup process. To protect the CLI-admin user credentials, create the minimum number of CLI-admin users needed to access the Cisco ISE CLI.

You can add the CLI-admin user by entering into the configuration mode in the CLI and using the username command.

Create a Web-Based Admin

For first-time web-based access to Cisco ISE system, the administrator username and password is the same as the CLI-based access that you configured during setup.

You can add web-based admin users through the user interface itself.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco