This article describes how to configure read-only access for certain users to the management console for the NetScaler Appliance that is using NetScaler 9.3 builds.

Instructions

1. In NetScaler GUI, go to System > Authentication.

2. Create an authentication server pointing to your authentication provider (valid entries include, Radius, LDAP, TACACS, and Cert).

3. Enable Policies tab.

4. Create a new authentication policy pointing to the server created in Step 2.

5. Due to a limitation in NetScaler 9.3, the authentication server must be bound globally. At the bottom of the Authentication Policies and Servers page, click Global Bindings.

6. In Bind/Unbind Authentication Policies to Global, click Insert Policy.

7. Insert the policy that is created in Step 4.

8. Click OK and then close and save the configuration.

9. For illustration, the groups and users in LDAP will be configured. Refer your vendor documentation on how to configure groups and users in other authentication formats (Radius, TACACS, and so on). Open the domain controller or authentication server that is referenced in Step 2.

10. For LDAP, open Active Directory Users and Computers.

    

11. If already a user is configured to grant read-only access to the management console, skip this step. If not, right-click on Users and create a new user.

12. Create a new group that will be used to specify the limited access to the management console. The name of the group must match the name used on the NetScaler (do not use any spaces on the group name).

    

13. Double-click the new group and add the users who must be provided read-only access to the management console.

    

14. On the NetScaler GUI, go to System > Groups.

    

15. Click Add and type the name of the group created in Active Directory (or other authentication server).

    Note: The name must be matching exactly (case sensitive). In Command Policies, select read-only check box.

    

16. Click Create and Close.

17. Save the configuration. To test, log off and log on to NetScaler as a member of the Read_Only_Access group.

    Note: For configuration utility changes in NetScaler 10.1, click here.