Specifications

6-4
Cisco Internet Streamer CDS 2.0-2.3 Software Configuration Guide
OL-13493-04
Chapter 6 Configuring the System
Configuring AAA
Note Deleting a user account from the CLI does not delete the corresponding account in the CDSM database.
User accounts created in the CDSM should always be deleted from within the CDSM.
Creating, Editing, and Deleting Roles
Although the CDSM provides many types of services, not all users have access to all services. Users are
assigned a role, which indicates the services to which they have access. A role is a set of enabled
services.
Each user account can be assigned zero or more roles. Roles are not inherited or embedded. The CDSM
provides one predefined role, known as the admin role. The admin role has access to all services and all
CDS network entities.
Note The admin user account, by default, is assigned to the role that allows access to all domains and all
entities in the system. It is not possible to change the role for this user account.
To create or edit a role, follow these steps:
Step 1 Choose System > AAA > Roles. The Roles Table page is displayed.
Step 2 Click the Create New icon in the task bar. The Role page is displayed.
To edit a role, click the Edit icon next to the role name.
Step 3 In the Name field, enter the name of the role.
Step 4 To expand a listing of services under a category, click the folder, and then check the check box next to
the service or services you want to enable for this role. To choose all the services under one category
simultaneously, check the check box for the top-level folder.
Step 5 In the Comments field, enter any comments about this role.
Step 6 Click Submit to save the settings.
To delete a role, in the Roles Table page click the Edit icon next to the role name. Once the Role page
is displayed, click the Trash icon in the task bar.
Creating, Editing, and Deleting Domains
A domain is a set of CDS network entities or objects that make up the CDS network. Whereas a role
defines which services a user can perform in the CDS network, a domain defines the entities to which
the user has access. An entity can be a Service Engine, a device group, or a delivery service. These
predefined entities are treated like services and can be enabled or disabled when you set up user roles.
When you configure a domain, you can choose to include Service Engines, device groups, or delivery
services in the domain.