Access mode privilege or giving access to some commands

We have a tunnel vpn site-to-site for various offices and we generally use taacs as user name and password, and we want to give the privilege level of access to few people. and access to only a few commands in mode privilege by using the same password Ganymede, by cli and asdm?

You kindly help me with this

Thnx a lot

Please visit this link

http://www.Cisco.com/en/us/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml

You need permission to install command.

Kind regards

~ JG

Note the useful messages

Tags: Cisco Security

Similar Questions

  • root access to some commands crsctl

    The GI Version: 11.2.0.3
    Platform: Red Hat Enterprise Linux 5.8


    Most of the commands of crsctl can be run while connected as a network user. But some of the crsctl commands as below to be executed while connected as user root.
    $ crsctl start cluster -n sdasher199
    CRS-4563: Insufficient user privileges.
    
    CRS-4000: Command Start failed, or completed with errors.
    What type crsctl commands must be run as root? Is there a list or is there a way to identify?

    That's as close as I've seen... it tells you what commands require root:

    http://docs.Oracle.com/CD/E11882_01/RAC.112/e16794/crsref.htm

  • Deleting files of Time Machine, "the operation cannot be performed because you have not granted access to some of the elements."

    I am trying to remove approximately two weeks (at a time), but I get "the operation cannot be performed because you have not granted access to some of the elements." How can I get around that?

    Thank you

    My OS is 10.11.3

  • Access to some routers to bridge mode

    Hello

    I set up a wireless network in my house in the following format.

    I have 3 routers Linksys EA2700. One is configured as ISP and DHCP and others are configured in bridge mode, so they can play the role of access points.

    Also, I created 3 separate networks with different SSID.

    Right now I have a stable internet connection on all 3, but would like to have access to them.

    If I try to access it by typing the IP address (for example the second router IP address is 192.168.1.102) he directs me to the first linksys router. If I use the routers password it still does not.

    Thank you in advance.

    Hi dkey89, I agree with chadster you can set the password even with each other. Either way, what is the IP address of the main router?

  • Is it possible to prohibit the access of some users in the Panel?

    My PC running Windows 7 is used by some users.

    I want to edit group policy to deny access to users 2 Control Panel, but I don't want to change the strategy of control panel for other users.

    Is it possible to change the policy to only 2 users in admin account or do I need to log on as each account to change the policy for each user?

    Please give me some advice.

    Hello

    Your system is connected to a domain?

    The question you posted would be better suited for COMPUTING public Pro on TechNet. I would recommend posting your query in the TechNet Forums to get help:

    Windows 7 security TechNet Forums

    Let us know if you need help with Windows related issues. We will be happy to help you.

  • I want to block access to some Web sites when using firefox, how do I do this?

    I would like to be able to block access to specific Web sites when using Firefox as my browser. How can I do this? Thank you.

    Block / unblock websites with parental control on Firefox

    https://addons.Mozilla.org/en-us/Firefox/addon/BlockSite/

  • How can I block access to some programs for user accounts?

    I try to block the user sub-accounts to use anything but a handful of programs under professional XP for my boss and have no idea how to go about on this subject in XP.  Any help would be great.

    For each file that you want to block, go to the 'Security' tab and deny execute access for user accounts appropriate .exe files.

    "How to set, view, change, or remove special permissions for files and folders in Windows XP"
      <>http://support.Microsoft.com/kb/308419 >

    HTH,
    JW

  • ISE ERS user access to some groups?

    Hello

    I am trying to create a simple operational interface for ISE 1.4 for the helpdesk people add mac addresses from endpoint to endpoint internal DB via REST.

    I would like to have the filtered helpdesk access (so that they can only create endpoints in a group given, not all groups), but it seems that the RBAC in ISE control for users of the RHS is all or nothing.

    I created a Custom Data Access Menu permissions then defined that a user in a group ERS Helpdesk would have access to it. On RBAC policy, I can not only specify a data access authorization, the system always makes me choose a permission to access the Menu as first option.

    If so I said that to the endpoint Group X, to access the data for a group of ERS Custom Data Access, the ERS user gets access denied to the DB.

    Only when I put the user on the RHS Admin by default, the default Super Admin Data Access group, it is able to have access to the DB.

    I would like to ask if anyone of you has managed to control the data set that is at HIA outside access or read access and if so, how.

    Thank you

    Gustavo Novais

    PS: ERS debug logs:

    2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-#--> getPathInfo = PAPFilter.doFilter / endpointgroup
    2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getMethod = GET
    2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
    2015-09-19 09:38:47, 172 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRemoteHost = 10.2.10.63
    2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> passing the filter!
    2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-#--> getPathInfo = AtnAtzFilter.doFilter / endpointgroup
    2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getMethod = GET
    2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
    2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRemoteHost = 10.2.10.63
    2015-09-19 09:38:47, 174 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter: adminName = RHS
    2015-09-19 09:38:47, 174 INFO [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-AtnAtzFilter 401Blocked: user is not authorized to access the requested resource.
    2015-09-19 09:38:47, 175 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# RateLimitFilter Servlet => continue with the response of the RHS, the current number of bucket: 49
    2015-09-19 09:39:15, 992 INFO [admin-http-pool279] [api.services.server.role.RoleImpl] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-extract the list of roles for entityFQN Information: NAC group: NAC
    2015-09-19 09:39:20, 328 INFO [admin-http-pool295] [api.services.persistance.dao.UserDAO] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-update of user as user name information: NAC Group: NAC:ers
    2015-09-19 09:39:20, 330 INFO [admin-http-pool295] [api.services.persistance.dao.MappingDAO] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-creating new mapping with rolebundle ' Global: Default "context" Global Context context: Global ' user ' NAC Group: NAC:ers' role ' NAC Group: NAC:RBACGroups:ERS Admin»
    2015-09-19 09:39:20, 333 INFO [admin-http-pool295] [api.services.server.mapping.MappingImpl] -: admin:455184AE2B954C78C9EAD7AAECD913F8:-removing users from role with the name ' NAC Group: NAC:RBACGroups:ERS filters under contextFQN "Global Context context: Global", bundle Global role: by default "with transactional 'false' is
    2015-09-19 09:39:34, 682 INFO [ers-http-pool732] [cisco.cpm.nsf.impl.UserIdentityManagement] -:-the internal authentication method to check if the policies in correspondence of the user groups duration is 7
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-#--> getPathInfo = MaxThreadsFilter.doFilter / endpointgroup
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# MaxThreadsFilter.doFilter--> getMethod = GET
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# MaxThreadsFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# MaxThreadsFilter.doFilter--> getRemoteHost = 10.2.10.63
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.MaxThreadsLimiterFilter] -:-# RateLimitFilter Servlet => continue with the request of the RHS, the current number of bucket: 49
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-#--> getPathInfo = PAPFilter.doFilter / endpointgroup
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getMethod = GET
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
    2015-09-19 09:39:34, 691 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> getRemoteHost = 10.2.10.63
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.PAPFilter] -:-# PAPFilter.doFilter--> passing the filter!
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-#--> getPathInfo = AtnAtzFilter.doFilter / endpointgroup
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getMethod = GET
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRequestURL =https://10.1.156.136:9060 / ers/config/endpointgroup
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter.doFilter--> getRemoteHost = 10.2.10.63
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter: adminName = RHS
    2015-09-19 09:39:34, 693 DEBUG [ers-http-pool732] [cpm.ers.app.web.AtnAtzFilter] -:-# AtnAtzFilter: = RHS adminName is Admin ERS

    He does not seem to have many options when it comes to control access to resource api ers, I ended up doing my own local map in my web application to ad vs access groups groups endpoint.

  • Winner 8.1 troubleshooting LAN access internet - some Web sites won't open

    Hello

    I just installed Win 8.1 pro on a new pc. I have difficulties to access the internet with a browser and activate Windows. I connected via LAN to a switch that another PC with Windows 8.1 is also linked and this pc works fine with good bandwidth.

    The PC with a problem was IE and chrome installed. In both browsers, I can open the site www.google.com and www.facebook.com. Another site, I tried does not open and I get the error that the site cannot be opened (for example, www.speedtest,net. When I click the diagnose, I get the result found no error.

    I can access network resources in the home such as file shares. I see that the router find the PC and gave it a unique IP address. It lists also under the name I gave the machine during the installation of the operating system.  I can ping other devices in the House as well.

    Now I'm not sure how to continue to fix these errors. Any suggestions?

    Merry Christmas
    John

    Hi John,.

     
    Thank you. I wish you a Merry Christmas and a happy new year.
     
    What is the exact error message you get while trying to access other Web sites using Internet Explorer?
     
    As you say that Windows is not activated, so I highly recommend you to activate Windows it is necessary to make the computer work. You can see the steps mentioned below.
    Online activation
    1. press Windows + R type slui 3 and click ok.
    2. tap the button and follow the instructions on the screen to activate Windows.
     
    If she fails to activate Windows, and then follow the steps mentioned below to activate it.
    The phone activation
    1. press Windows + R type slui 4 and click ok.
    2. now select the country and follow the instructions on the screen to activate Windows.
     
    Now please check if the proxy settings is enabled. See the steps mentioned below.
    1. press Windows + R, type inetcpl.cpl , and then click OK.
    2. now, go to Internet Options, then the connection tab.

    3. click on LAN settings.

    4. If using a proxy server for your LAN check box is checked, uncheck it.

    5. click on Ok.

     
    You can also view the article mentioned below.
    Wireless and wired network problems
     
    Hope this information helps. Please get back to us if you need further assistance.
  • ACCESS TO SOME DATA LINE

    Hi, I have a database table and you need to pull the information from the table by its specific line, do anyone know how I can do? Any help will be much appreciated, thank you.

    Would you want me to?

    #blah.question [required_row_number] #.

  • I'm looking for a sleep mode function that goes off after some time. I would like to limit the time that my teenager spend on the game

    I know how to use window 7 time limit control. BUT it does allow me to leave my teenager spend any time of the day only 2 hours. I'm looking for something like a standby mode. After that he connects to his side of the user of the computer, turning after 2 hours of play.

    (Moved from Gaming)

    Hi Stephanie,

    Thanks for posting your request here in the Microsoft Community.

    We have a feature called schedule a task, this will help you plan the task of putting the computer in Mode standby when you want the computer to access the Mode sleep. See the following Microsoft Help article to learn more about this feature.

    http://Windows.Microsoft.com/en-us/Windows/schedule-task#1TC=Windows-7

    For more information, you can consult the following Microsoft Help article.

    http://Windows.Microsoft.com/en-us/Windows7/sleep-and-hibernation-frequently-asked-questions

    Please reply with the status of the issue so that we can better help you.

  • Executing an .exe file indicating "Access denied in command prompt" and a pop up with message error "this application can run on your pc.

    Hello team,

    I have a c# console application (EX: Utility.exe) who was once fully functional in windows server 2012 since last year 1. but for a few days while running display of the 'access denied' prompt in the command prompt and a pop up with message

    "This application can run on your pc to find a version for the control of your pc with the software publisher. I am not able to understand why I get this weird error. Other exe files works quite well in the command prompt. below is the screenshot for reference. If everyone is facing the same kind of issues before please answer quickly. are

    Hello

    You may need to ask the question on the TechNet forums:

    https://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?Forum=winserver8gen

    Concerning

  • Cannot access the recovery command prompt Vista computer network

    I have Vista machine over the network to a Windows 7 computer and used wbadmin to perform a backup of the Vista machine on a shared folder on the Windows 7 machine. Now I want to access it from the Vista recovery command prompt (after the start of the DVD). I can't access the folder.

    I ran first startnet. I assured that the folder has received the maximum share permissions. However wbadmin get reports versions "could not read the backup destination. I tried dir on the network share location and it says "access denied." I tried net use on the network share, location, entered the correct user name and password, and he noted "the provided user context is not valid.

    The share is accessible when Vista is started normally.

    Hello

    Check if you put in the correct username format, example:

    Enter the user name for : \username
    Enter the password for :

    If they continue to have problems, I suggest you repost the question TechNet.

    http://social.technet.Microsoft.com/forums/en-us/category/windowsvistaitpro

    Amrita M

    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Authentication mode privilege using Ganymede for Cisco routers

    I'm trying to set up a test environment where I need to be able to be requested for both a user name and password entering mode mode exec on a cisco IOS router. I was told the only way to do is through Ganymede. But I didn't all these configuration on Ganymede options to put in right place. Someone has already done an installation like this before. I'd appreciate any help on this. Thank you.

    That's right, as I said in my previous post you can not accomplish what you're trying to do.  In IOS the username that you use to connect

    the router is ALWAYS used when you are in enable mode.  If you want to change the user logged in as you will need log on the

    router and log back in with the right user.

    -Jesse

  • calcuator supplied with windows 8 not giving wrong answers some calculations

    The next sum is tried in standard mode of windows 8 calculator.

    The amount is 1.00, 000 * 9% / 12 750 is the right answer. But it shows 75,000,000. Haven't tried all kinds of useless. The same problem is also with windows 7, Nokia Lumia 530. Are there settings to change? Please answer.

    Nope, see order of operations - Wikipedia, the free encyclopedia to learn why your calculation goes wrong.  You need parentheses so that he knows what order to perform the calculation.

Maybe you are looking for