conf/groups
Files in the conf/groups directory define the permission groups configured for administrative access to the software. The name of a file is the name of the group it defines. Permission groups can be managed under the System > Users section of the Admin Server UI. Each group will contain a list of configuration keys with names that mostly correspond to pages in the Admin Server UI. These may have values of either none, ro (read only, this is the default), or full. Some permissions have sub-permissions, these are denoted by following the parent permission name with an exclamation mark (!) followed by the sub-permission name. The built-in admin group has a special permission key of all with the value full, this cannot be altered for the admin group but can be used in other group configuration files to change the default permission level for the group.
Key | Description |
|---|---|
description | A description for the group. Value type: string Default value: <none> |
password_expire_time | Members of this group must renew their passwords after this number of days. To disable password expiry for the group set this to 0 (zero). Note that this setting applies only to local users. Value type: unsigned integer Default value: "0" |
timeout | Inactive UI sessions will timeout after this number of seconds. To disable inactivity timeouts for the group set this to 0 (zero). Value type: unsigned integer Default value: "30" |
Permission keys by section | |
Section: "Activity" | |
Connections | "Connections" Permitted values: none, ro, or full |
Connections!Details | "Connections > Details" Permitted values: none, ro, or full |
Web_Cache | "Content Cache" Permitted values: none, ro, or full |
Web_Cache!Clear | "Content Cache > Clear" Permitted values: none, ro, or full |
Monitoring | "Current Activity" Permitted values: none, ro, or full |
Monitoring!Edit | "Current Activity > Edit" Permitted values: none, ro, or full |
Request_Logs | "Download Logs" Permitted values: none, ro, or full |
Draining | "Draining Nodes" Permitted values: none, ro, or full |
Statd | "Historical Activity" Permitted values: none, ro, or full |
Map | "Map" Permitted values: none, ro, or full |
Log_Viewer | "View Logs" Permitted values: none, ro, or full |
Log_Viewer!View | "View Logs > View" Permitted values: none, ro, or full |
Section: "Advanced Management" | |
Appliance_Console | "Appliance Console" Permitted values: none or full Requires feature: Appliance |
Custom | "Custom Configuration Sets" Permitted values: none, ro, or full |
SOAP_API | "SOAP Control API" Permitted values: none or full Requires feature: SOAP |
Section: "Catalogs" | |
Authenticators | "Authenticators" Permitted values: none, ro, or full |
Authenticators!Edit | "Authenticators > Edit" Permitted values: none, ro, or full |
Bandwidth | "Bandwidth" Permitted values: none, ro, or full Requires feature: Bandwidth |
Bandwidth!Edit | "Bandwidth > Edit" Permitted values: none, ro, or full Requires feature: Bandwidth |
Bandwidth!Edit!CopyClass | "Bandwidth > Edit > Copy Class" Permitted values: none, ro, or full Requires feature: Bandwidth |
Cloud_Credentials | "Cloud Credentials" Permitted values: none, ro, or full |
Cloud_Credentials!Edit | "Cloud Credentials > Edit" Permitted values: none, ro, or full |
DNS_Server | "DNS Server" Permitted values: none, ro, or full |
DNS_Server!Zonefiles | "DNS Server > Zone Files" Permitted values: none, ro, or full |
DNS_Server!Zones | "DNS Server > Zones" Permitted values: none, ro, or full |
DNS_Server!Zones!Edit | "DNS Server > Zones > Edit" Permitted values: none, ro, or full |
Extra_Files | "Extra Files" Permitted values: none, ro, or full |
Extra_Files!Action_Programs | "Extra Files > Action Programs" Permitted values: none, ro, or full |
Extra_Files!Miscellaneous_Files | "Extra Files > Miscellaneous" Permitted values: none, ro, or full |
Extra_Files!ExternProgMonitors | "Extra Files > Monitor Programs" Permitted values: none, ro, or full |
GLB_Services | "GLB Services" Permitted values: none, ro, or full |
GLB_Services!Edit | "GLB Services > Edit" Permitted values: none, ro, or full |
GLB_Services!Edit!DNS_Settings | "GLB Services > Edit > DNS Settings" Permitted values: none, ro, or full |
GLB_Services!Edit!DNSSEC | "GLB Services > Edit > DNSSEC" Permitted values: none, ro, or full |
GLB_Services!Edit!Load_Balancing | "GLB Services > Edit > Load Balancing" Permitted values: none, ro, or full |
GLB_Services!Edit!Locations | "GLB Services > Edit > Locations" Permitted values: none, ro, or full |
GLB_Services!Edit!Request_Logging | "GLB Services > Edit > Request Logging" Permitted values: none, ro, or full |
GLB_Services!Edit!Rules | "GLB Services > Edit > Rules" Permitted values: none, ro, or full |
Java | "Java" Permitted values: none, ro, or full |
Java!Edit | "Java > Edit" Permitted values: none, ro, or full |
Kerberos | "Kerberos" Permitted values: none, ro, or full |
Kerberos!krb5confs | "Kerberos > Kerberos Configuration Files" Permitted values: none, ro, or full |
Kerberos!Kerberos_Keytabs | "Kerberos > Kerberos Keytabs" Permitted values: none, ro, or full |
Kerberos!Kerberos_Principals | "Kerberos > Kerberos Principals" Permitted values: none, ro, or full |
Kerberos!Kerberos_Principals!Edit | "Kerberos > Kerberos Principals > Edit" Permitted values: none, ro, or full |
Locations | "Locations" Permitted values: none, ro, or full |
Locations!Edit | "Locations > Edit" Permitted values: none, ro, or full |
Monitors | "Monitors" Permitted values: none, ro, or full |
Monitors!Edit | "Monitors > Edit" Permitted values: none, ro, or full |
Monitors!Edit!CopyMonitor | "Monitors > Edit > Copy Monitor" Permitted values: none, ro, or full |
Catalog | "Overview" Permitted values: none, ro, or full |
Persistence | "Persistence" Permitted values: none, ro, or full |
Persistence!Edit | "Persistence > Edit" Permitted values: none, ro, or full |
Persistence!Edit!CopyClass | "Persistence > Edit > Copy Class" Permitted values: none, ro, or full |
Service_Protection | "Protection" Permitted values: none, ro, or full |
Service_Protection!Edit | "Protection > Edit" Permitted values: none, ro, or full |
Service_Protection!Edit!CopyClass | "Protection > Edit > Copy Class" Permitted values: none, ro, or full |
Rate | "Rate" Permitted values: none, ro, or full Requires feature: Rules |
Rate!Edit | "Rate > Edit" Permitted values: none, ro, or full Requires feature: Rules |
Rules | "Rules" Permitted values: none, ro, or full Requires feature: Rules |
Rules!GEdit | "Rules > Build" Permitted values: none, ro, or full Requires feature: Rules |
Rules!GEdit!AddAction | "Rules > Build > Add Action" Permitted values: none, ro, or full Requires feature: Rules |
Rules!GEdit!AddCondition | "Rules > Build > Add Condition" Permitted values: none, ro, or full Requires feature: Rules |
Rules!GEdit!Convert | "Rules > Build > Convert" Permitted values: none, ro, or full Requires feature: Rules |
Rules!Edit | "Rules > Edit" Permitted values: none, ro, or full Requires feature: Rules |
Rules!Edit!CheckSyntax | "Rules > Edit > Check Syntax" Permitted values: none, ro, or full Requires feature: Rules |
Rules!Edit!SaveAs | "Rules > Edit > Save As" Permitted values: none, ro, or full Requires feature: Rules |
SAML | "SAML" Permitted values: none, ro, or full |
SAML!Trusted_Identity_Providers | "SAML > Trusted Identity Providers" Permitted values: none, ro, or full |
SAML!Trusted_Identity_Providers!Edit | "SAML > Trusted Identity Providers > Edit" Permitted values: none, ro, or full |
Service_Discovery | "Service Discovery" Permitted values: none, ro, or full |
Service_Discovery!Builtin_Plugins | "Service Discovery > Built-in Plugins" Permitted values: none, ro, or full |
Service_Discovery!User_Plugins | "Service Discovery > User Plugins" Permitted values: none, ro, or full |
SLM | "SLM" Permitted values: none, ro, or full Requires feature: SLM |
SLM!Edit | "SLM > Edit" Permitted values: none, ro, or full Requires feature: SLM |
SLM!Edit!CopyClass | "SLM > Edit > Copy Class" Permitted values: none, ro, or full Requires feature: SLM |
SSL | "SSL" Permitted values: none, ro, or full |
SSL!AdminCAs | "SSL > Admin CAs and CRLs" Permitted values: none, ro, or full |
SSL!AdminCAs!Edit | "SSL > Admin CAs and CRLs > Edit" Permitted values: none, ro, or full |
SSL!AdminCAs!Import | "SSL > Admin CAs and CRLs > Import" Permitted values: none, ro, or full |
SSL!CAs | "SSL > CAs and CRLs" Permitted values: none, ro, or full |
SSL!CAs!Edit | "SSL > CAs and CRLs > Edit" Permitted values: none, ro, or full |
SSL!CAs!Import | "SSL > CAs and CRLs > Import" Permitted values: none, ro, or full |
SSL!Client_Certs | "SSL > Client Certs" Permitted values: none, ro, or full |
SSL!Client_Certs!Edit | "SSL > Client Certs > Edit" Permitted values: none, ro, or full |
SSL!Client_Certs!Edit!Chain | "SSL > Client Certs > Edit > Chain" Permitted values: none, ro, or full |
SSL!Client_Certs!Edit!CopyCert | "SSL > Client Certs > Edit > Copy Certificate" Permitted values: none, ro, or full |
SSL!Client_Certs!Edit!Sign | "SSL > Client Certs > Edit > Sign" Permitted values: none, ro, or full |
SSL!Client_Certs!Import | "SSL > Client Certs > Import" Permitted values: none, ro, or full |
SSL!Client_Certs!New | "SSL > Client Certs > New" Permitted values: none, ro, or full |
SSL!DNSSEC_Keys | "SSL > DNSSEC Keys" Permitted values: none, ro, or full |
SSL!SSL_Certs | "SSL > Server Certs" Permitted values: none, ro, or full |
SSL!SSL_Certs!Edit | "SSL > Server Certs > Edit" Permitted values: none, ro, or full |
SSL!SSL_Certs!Edit!Chain | "SSL > Server Certs > Edit > Chain" Permitted values: none, ro, or full |
SSL!SSL_Certs!Edit!CopyCert | "SSL > Server Certs > Edit > Copy Certificate" Permitted values: none, ro, or full |
SSL!SSL_Certs!Edit!Sign | "SSL > Server Certs > Edit > Sign" Permitted values: none, ro, or full |
SSL!SSL_Certs!Import | "SSL > Server Certs > Import" Permitted values: none, ro, or full |
SSL!SSL_Certs!New | "SSL > Server Certs > New" Permitted values: none, ro, or full |
SSL!Ticket_Keys | "SSL > SSL ticket keys" Permitted values: none, ro, or full |
Aptimizer | "Web Accelerator" Permitted values: none, ro, or full |
Aptimizer!URL_Sets | "Web Accelerator > Application Scopes" Permitted values: none, ro, or full |
Aptimizer!URL_Sets!Edit | "Web Accelerator > Application Scopes > Edit" Permitted values: none, ro, or full |
Aptimizer!Aptimizer_Profiles | "Web Accelerator > Web Accelerator Profiles" Permitted values: none, ro, or full |
Aptimizer!Aptimizer_Profiles!Edit | "Web Accelerator > Web Accelerator Profiles > Edit" Permitted values: none, ro, or full |
Section: "Configuring" | |
Config_Summary | "Config Summary" Permitted values: none, ro, or full |
Config_Summary!Export | "Config Summary > Export configuration" Permitted values: none, ro, or full |
Config_Summary!Export_Secrets | "Config Summary > Export secrets" Permitted values: none, ro, or full |
Pools | "Pools" Permitted values: none, ro, or full |
Pools!Edit | "Pools > Edit" Permitted values: none, ro, or full |
Pools!Edit!Bandwidth | "Pools > Edit > Bandwidth" Permitted values: none, ro, or full Requires feature: Bandwidth |
Pools!Edit!DNSAutoscaling | "Pools > Edit > DNS-derived autoscaling" Permitted values: none, ro, or full |
Pools!Edit!IP_Transparency | "Pools > Edit > IP Transparency" Permitted values: none, ro, or full |
Pools!Edit!Kerberos_Protocol_Transition | "Pools > Edit > Kerberos Protocol Transition" Permitted values: none, ro, or full |
Pools!Edit!Load_Balancing | "Pools > Edit > Load Balancing" Permitted values: none, ro, or full |
Pools!Edit!Monitors | "Pools > Edit > Monitors" Permitted values: none, ro, or full |
Pools!Edit!Protocol_Settings | "Pools > Edit > Protocol Settings" Permitted values: none, ro, or full |
Pools!Edit!Service_Discovery | "Pools > Edit > Service Discovery" Permitted values: none, ro, or full |
Pools!Edit!Persistence | "Pools > Edit > Session Persistence" Permitted values: none, ro, or full |
Pools!Edit!SSL | "Pools > Edit > SSL" Permitted values: none, ro, or full |
Pools!Edit!Autoscaling | "Pools > Edit > vTM Autoscaler" Permitted values: none, ro, or full |
Traffic_IP_Groups | "Traffic IP Groups" Permitted values: none, ro, or full |
Traffic_IP_Groups!Edit | "Traffic IP Groups > Edit" Permitted values: none, ro, or full |
Traffic_IP_Groups!Networking | "Traffic IP Groups > Networking" Permitted values: none, ro, or full |
Virtual_Servers | "Virtual Servers" Permitted values: none, ro, or full |
Virtual_Servers!Edit | "Virtual Servers > Edit" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Authentication | "Virtual Servers > Edit > Authentication" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Classes | "Virtual Servers > Edit > Classes" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Request_Tracing | "Virtual Servers > Edit > Connection Analytics" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Content_Caching | "Virtual Servers > Edit > Content Caching" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Content_Compression | "Virtual Servers > Edit > Content Compression" Permitted values: none, ro, or full |
Virtual_Servers!Edit!DNS_Server | "Virtual Servers > Edit > DNS Server" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Error_Logging | "Virtual Servers > Edit > Error Logging" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Kerberos_Protocol_Transition | "Virtual Servers > Edit > Kerberos Protocol Transition" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Protocol_Settings | "Virtual Servers > Edit > Protocol Settings" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Request_Logging | "Virtual Servers > Edit > Request Logging" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Rules | "Virtual Servers > Edit > Rules" Permitted values: none, ro, or full Requires feature: Rules |
Virtual_Servers!Edit!Rules!EnableDisable | "Virtual Servers > Edit > Rules > Enable / Disable" Permitted values: none, ro, or full Requires feature: Rules |
Virtual_Servers!Edit!Rules!Move | "Virtual Servers > Edit > Rules > Move" Permitted values: none, ro, or full Requires feature: Rules |
Virtual_Servers!Edit!Rules!OnceEvery | "Virtual Servers > Edit > Rules > Once / Every" Permitted values: none, ro, or full Requires feature: Rules |
Virtual_Servers!Edit!Rules!Remove | "Virtual Servers > Edit > Rules > Remove" Permitted values: none, ro, or full Requires feature: Rules |
Virtual_Servers!Edit!GLB_Services | "Virtual Servers > Edit > Service" Permitted values: none, ro, or full |
Virtual_Servers!Edit!SSL_Decryption | "Virtual Servers > Edit > SSL Decryption" Permitted values: none, ro, or full |
Virtual_Servers!Edit!Aptimizer_Settings | "Virtual Servers > Edit > Web Accelerator" Permitted values: none, ro, or full |
Section: "Diagnosing" | |
Audit_Log | "Audit Log" Permitted values: none, ro, or full |
Audit_Log!Audit_Archive | "Audit Log > Audit Archive" Permitted values: none, ro, or full |
Diagnose | "Cluster Diagnosis" Permitted values: none, ro, or full |
Diagnose!Replicate | "Cluster Diagnosis > Replicate" Permitted values: none, ro, or full |
Event_Log | "Event Log" Permitted values: none, ro, or full |
Event_Log!Clear | "Event Log > Clear" Permitted values: none, ro, or full |
Event_Log!Event_Archive | "Event Log > Event Archive" Permitted values: none, ro, or full |
Hardware | "Hardware" Permitted values: none, ro, or full Requires feature: Appliance |
Routing | "Routing" Permitted values: none, ro, or full |
Support_Files | "Support Files" Permitted values: none, ro, or full |
Support | "Technical Support" Permitted values: none, ro, or full |
Support!TSR | "Technical Support > TSR" Permitted values: none, ro, or full |
Section: "Main Pages" | |
Help | "Help" Permitted values: none, ro, or full |
MainIndex | "Main Index" Permitted values: none, ro, or full |
Reboot | "Reboot" Permitted values: none, ro, or full |
Restart | "Restart" Permitted values: none, ro, or full |
Shutdown | "Shutdown" Permitted values: none, ro, or full |
Section: "System" | |
Alerting | "Alerting" Permitted values: none, ro, or full |
Alerting!Actions | "Alerting > Actions" Permitted values: none, ro, or full |
Alerting!Actions!Edit | "Alerting > Actions > Edit" Permitted values: none, ro, or full |
Alerting!Event_Types | "Alerting > Event Types" Permitted values: none, ro, or full |
Alerting!Event_Types!Edit | "Alerting > Event Types > Edit" Permitted values: none, ro, or full |
Analytics_Export | "Analytics Export" Permitted values: none, ro, or full |
Analytics_Export!Log_Files | "Analytics Export > Log Files" Permitted values: none, ro, or full |
Analytics_Export!Log_Files!Edit | "Analytics Export > Log Files > Edit" Permitted values: none, ro, or full |
Backup | "Backups" Permitted values: none, ro, or full |
Backup!Config_Difference | "Backups > Compare" Permitted values: none, ro, or full |
Backup!Edit | "Backups > Edit" Permitted values: none, ro, or full |
Backup!Partial | "Backups > Partial" Permitted values: none, ro, or full |
Fault_Tolerance | "Fault Tolerance" Permitted values: none, ro, or full |
Fault_Tolerance!BGP_Neighbors | "Fault Tolerance > BGP Neighbors" Permitted values: none, ro, or full |
Fault_Tolerance!BGP_Neighbors!Edit | "Fault Tolerance > BGP Neighbors > Edit" Permitted values: none, ro, or full |
Global_Settings | "Global Settings" Permitted values: none, ro, or full |
Global_Settings!Restore_Defaults | "Global Settings > Restore Defaults" Permitted values: none, ro, or full |
License_Keys | "Licenses" Permitted values: none, ro, or full |
License_Keys!InstallNew | "Licenses > Install New" Permitted values: none, ro, or full |
License_Keys!Remove | "Licenses > Remove" Permitted values: none, ro, or full |
License_Keys!Register | "Licenses > Self-register" Permitted values: none, ro, or full |
Networking | "Networking" Permitted values: none, ro, or full Requires feature: Appliance |
Networking!NAT | "Networking > NAT" Permitted values: none, ro, or full Requires feature: Appliance |
Security | "Security" Permitted values: none, ro, or full |
SNMP | "SNMP" Permitted values: none, ro, or full |
Sysctl | "Sysctl" Permitted values: none, ro, or full Requires feature: Appliance |
DateTime | "Time" Permitted values: none, ro, or full Requires feature: Appliance |
Traffic_Managers | "Traffic Managers" Permitted values: none, ro, or full |
Traffic_Managers!AddRemove | "Traffic Managers > AddRemove" Permitted values: none, ro, or full |
Traffic_Managers!Rollback | "Traffic Managers > Rollback" Permitted values: none, ro, or full |
Traffic_Managers!Upgrade | "Traffic Managers > Upgrade" Permitted values: none, ro, or full |
Access_Management | "Users" Permitted values: none, ro, or full |
Access_Management!AuthenticationMethods | "Users > Authenticators" Permitted values: none, ro, or full |
Access_Management!AuthenticationMethods!Edit | "Users > Authenticators > Edit" Permitted values: none, ro, or full |
Access_Management!Groups | "Users > Groups" Permitted values: none, ro, or full |
Access_Management!Groups!Edit | "Users > Groups > Edit" Permitted values: none, ro, or full |
Access_Management!LocalUsers | "Users > Local" Permitted values: none, ro, or full |
Access_Management!LocalUsers!Edit | "Users > Local > Edit" Permitted values: none, ro, or full |
Access_Management!LocalUsers!EditOtherUsers | "Users > Local > Other Users" Permitted values: none, ro, or full |
Access_Management!LocalUsers!PasswordPolicy | "Users > Local > Password Policy" Permitted values: none, ro, or full |
Access_Management!Suspended_Users | "Users > Suspended Users" Permitted values: none, ro, or full |
AFM | "Web Application Firewall" Permitted values: none, ro, or full |
AFM!Admin | "Web Application Firewall > Administration" Permitted values: none or full |
Section: "Wizards" | |
Wizard!Backup | "Wizard > Backup my configuration" Permitted values: none, ro, or full |
Wizard!AzureKeyVault | "Wizard > Connect to Microsoft Azure Key Vault" Permitted values: none, ro, or full |
Wizard!DisableNode | "Wizard > Disable a node" Permitted values: none, ro, or full |
Wizard!DrainNode | "Wizard > Drain a node" Permitted values: none, ro, or full |
Wizard!EnableRule | "Wizard > Enable/Disable a rule" Permitted values: none, ro, or full Requires feature: Rules |
Wizard!FreeDiskSpace | "Wizard > Free up some disk space" Permitted values: none, ro, or full |
Wizard!ClusterJoin | "Wizard > Join a cluster" Permitted values: none, ro, or full |
Wizard!PulseConnectSecure | "Wizard > Load-balance Ivanti Connect Secure" Permitted values: none, ro, or full |
Wizard!NewService | "Wizard > Manage a new service" Permitted values: none, ro, or full |
Wizard!OptimalGatewaySelection | "Wizard > Optimal Gateway Selection" Permitted values: none, ro, or full |
Wizard!AptimizeService | "Wizard > Optimize a web application" Permitted values: none, ro, or full |
Wizard!ReactivateNode | "Wizard > Reactivate a node" Permitted values: none, ro, or full |
Wizard!RemoveNode | "Wizard > Remove a node" Permitted values: none, ro, or full |
Wizard!Restore | "Wizard > Restore from a backup" Permitted values: none, ro, or full |
Wizard!SSLDecryptService | "Wizard > SSL Decrypt a service" Permitted values: none, ro, or full |