Filter
Top Products
Understanding Default Management User Roles
The ArubaOS software includes predefined management user roles.
NOTE: If you upgrade from a previous ArubaOS release, your existing configuration may have different management roles. The
information in this section only describes the predefined management roles for this release.
Predefined Role Permissions
root This role permits access to all management functions (commands and operations) on the
controller.
read-only
This role permits access to CLI show commands or WebUI monitoring pages only.
guest-provisioning This role permits access to configuring guest users in the controller’s internal database only.
This user only has access via the WebUI to create guest accounts; there is no CLI access.
Guest-provisioning tasks include creating or generating the user name and password for a
guest account as well as configuring when the account expires.
location-api-mgmt This role permits access to location API information and the CLI; however, you cannot use any
CLI commands. This role does not permit access to the WebUI.
Using a third-party location appliance, you can gather information about the location of 802.11
stations.
To log in to the controller using a third-party location appliance, enter:
http[s]://<ipaddress>[:port]/screens/wms/wms.login.
You are prompted to enter your username and password (for example, the username and
password associated with the location API management role). Once authenticated, you can
use an API call to request location information from the controller, for example:
http[s]://<ipaddress>[:port]/screens/wms/wms.cgi?opcode=wlm-get-spot&campus-
name=<campus id>&building-name<building id>&mac=<client1>,<client2>....
network-operations
This role supports a subset of show, configuration, action, and database commands that are
used to monitor the controller. You can log into the CLI; however, you can only use a subset of
CLI commands to monitor the controller.
This role permits the following WebUI pages and associated CLI commands:
As a network-operations user, commands with an asterisk (*) are hidden in the CLI but are
executed and visible from the WebUI.
Plan Page
l You can move APs on the floor plan and save their new location.
l You cannot change or modify the AP configuration.
Reports Page
l You can view all of the available reports.
Events Page
l You can view all of the available events.
Monitoring Page
You can view the reports created by the following CLI commands:
l show keys all
l show mobility-managers
l show roleinfo
l show license
*
l show ap essid
l DB:opcode=cr-load
Monitoring > Network > Network Summary
You can view the reports created by the following CLI commands:
l show interface vlan <id>
Table 403:
Predefined Management Roles
DellPowerConnectW-SeriesArubaOS6.2 | User Guide Behavior and Defaults | 832