Configure Role-based Access Control
RBAC users for AmpCon
AmpCon offers role-based access control for various workflows. Roles with the following responsibilities are supported:
Super User
Provides access to all AmpCon functions
Only role that can create new users
Admin
Provides access to all AmpCon functions, including creating and maintaining templates
Operator
Cannot change templates or AmpCon global settings
Can perform all switch-related config/deployment/lifecycle/SDN functions
Read Only
Access to all display functions, including switch lists, alarms, and configs
The following operations are not allowed with Read-Only access:
Connect via SSH to switch, or change any AmpCon settings/configurations
Run any Lifecycle functions except display and Map View
Create/change Configs or Templates
Run License Audits
You can create users for performing AmpCon functions using the GUI and assign each user a specific role that provides the least privilege necessary to their job.
The following example shows the necessary steps for creating a Super User role. After you log into the GUI, navigate to Users -> Manage Users and click Add User as shown below:
Create a new Super Admin user as shown below and click Create:
Notice
From v1.12.1, we improve the user password security policy.
It required the password length >= 10, include uppercase + lowercase chars and special chars (^=+&$#@! %)
User login lock function
From v1.12.1, AmpCon support to manually lock user login or automatically lock user login if user failed to login 3 time in 5min with wrong passwords.
Notice
Pay attention that only user level < "SuperAdmin" can be locked.
If a "SuperAdmin" user login with wrong password for 3 times in 5min, AmpCon will automatically locked this user login for 5min.
If a user which level is "Admin"/"Operator"/"ReadOnly", it requires a "SuperAdmin" user to manually unlock the user login in "Users" > "Manage Users".
Manually lock / unlock user
In Users > Manage Users, SuperAdmin user can check the lock / unlock status in right side table.
User can click "Unlock" button in right side "Operation" column if a user is locked.
User can click Lock" button in right side "Operation" column if user want to lock the user login for this user.