Adding TACACS+ user groups - BlueCat Integrity - 26.1.0

Address Manager Administration Guide
ft:locale
en-US
Product name
BlueCat Integrity
Version
26.1.0

Address Manager TACACS+ Groups allow users from TACACS+ systems to log in to Address Manager. Use TACACS+ Groups when you already have users defined in another TACACS+ system and you don't want to re-create and maintain those users in Address Manager.

When users from a TACACS+ group log in to Address Manager, they're automatically added to the Users list, and the TACACS+ User column indicates that the users are TACACS+ users. Unlike standard Address Manager users, you don't need to create the user in Address Manager before the user can log in. After manually creating a TACACS+ user group, any users you add to the TACACS+ group on your TACACS+ server can log in to Address Manager.

You can assign access rights to the TACACS+ group, and you can assign access rights to individual TACACS+ users. If you have several TACACS+ groups with differing access rights, and a user belongs to multiple groups, or if you apply access rights to a user in addition to those that the user inherits from the TACACS+ group, the user receives the most permissive access rights.

Note: You can't assign TACACS+ users to standard Address Manager user groups.
Note:
  • Before creating TACACS+ groups, you must set up one or more TACACS+ authenticators. For information on adding authenticators, refer to Adding external authenticators.
  • You can only edit a TACACS+ group name after you create it. To make changes to other parameters of a TACACS+ group, delete the group and then re-create it.

To add a TACACS+ Group:

  1. Select the Settings tab in the sidebar.
  2. Under User management, select Users and groups.
  3. Select the User groups tab.
  4. Select New > TACACS+ group.
  5. Under General, set the following parameters:
    • Name—enter a name for the TACACS+ group.
    • Authenticator—select the previously configured TACACS+ authenticator.
  6. On the Access rights tab, select Assign administrator privilege to assign users within the LDAP group administrative user privileges.
  7. On the Change control tab, enter change control comments if required.
  8. Select Create or Create and add another.