Cisco Systems OL-24201-01 manual Administrator Accounts and Role Association, 16-6

Chapter 16 Managing System Administrators

Creating, Duplicating, Editing, and Deleting Administrator Accounts

Administrator Accounts and Role Association

Administrator account definitions consist of a name, status, description, e-mail address, password, and role assignment.

Note It is recommended that you create a unique administrator for each person. In this way, operations are clearly recorded in the audit log.

Administrators are authenticated against the internal database only.

You can edit and delete existing accounts. However, the web interface displays an error message if you attempt to delete or disable the last super administrator.

Only appropriate administrators can configure identities and certificates. The identities configured in the System Administration drawer are available in the Users and Identity Stores drawer, but they cannot be modified there.

Related Topics

•Understanding Roles

•Creating, Duplicating, Editing, and Deleting Administrator Accounts

Creating, Duplicating, Editing, and Deleting Administrator Accounts

To create, duplicate, edit, or delete an administrator account:

	Step 1	Choose System Administration > Administrators > Accounts.
		The Administrators page appears with a list of configured administrators as described in Table 16-2:
Table 16-2	Accounts Page
Option			Description
Status			Current status of this administrator:
			• Enabled—This administrator is active.
			• Disabled—This administrator is not active.
			You cannot log into ACS with a disabled admin account.
Name			Name of the administrator.
Role(s)			Roles assigned to the administrator.
Description			Description of this administrator.

	User Guide for Cisco Secure Access Control System 5.3
16-6	OL-24201-01