Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You can grant an admin group broad permissions to DHCP resources, such as read/write permission to all IPv4 or IPv6 networks and shared networks in the database. In addition, you can grant permission to specific resources, such as a specific IPv4 or IPv6 network or DHCP range, or an individual address in an IPv4 or IPv6 network. Permissions at more specific levels override global permissions.
You can also define permissions for specific DHCP objects and Grid member to restrict admins to perform only the specified DHCP tasks on the specified member. For more information, see Defining DNS and DHCP Permissions on Grid Members.
The following sections describe the different types of permissions that you can set for DHCP resources:

...

Table of Contents
maxLevel1

Administrative Permissions for

...

Administrative Permissions for Network Views

Limited-access admin groups can access network views, including the default network view, only if they have read-only or read/write permission to a specific network view or to all network views. Permissions granted to a network view apply to all its IPv4 and IPv6 networks, shared networks, DHCP ranges and fixed addresses.
You can grant admin groups read-only or read/write permission, or deny access to network views as follows:

...

Note that you can grant an admin group read-only or read/write permission to specific IPv4 or IPv6 networks in a network view, without granting them permission to that network view. For information, see  Permissions see the Administrative Permissions for IPv4 and IPv6 Networks and Shared Networks section.
For information on how to define permissions for network views, see Applying Permissions and Managing Overlaps.
The following table lists the tasks admins can perform and the required permissions for network views.:

Table 4.18 Network View Permissions

Tasks

All DNS Views

Specific DNS View

All Network Views

Specific Network View

All IPv4 or IPv6 Networks

All IPv4 or IPv6 Shared Networks

Create and delete network views and their associated DNS views

RW


RW




Create and delete a network view and its associated DNS views


RW


RW



Create, modify, and delete IPv4 and IPv6 networks and shared networks in all network views



RW




Create, modify, and delete IPv4 and IPv6 networks and shared networks in a network view




RW



View the properties of all network views



RO




View network statistics of all network views



RO




View and search for all IPv4 and IPv6 networks and shared networks



RO




View the properties of a network view




RO



View and search for IPv4 and IPv6 networks and shared networks in a network view




RO



Expand and join IPv4 and IPv6 networks



RW




Expand and join IPv4 and IPv6 networks in a specific network view




RW



Create, modify, and delete IPv4 and IPv6 networks, DHCP ranges and fixed addresses in a specific network view




RW



View network statistics and properties of all networks in a network view




RO



Search for IPv4 and IPv6 networks in a network view




RO



Create, modify, and delete all IPv4 or IPv6 shared networks






RW

View the properties of all IPv4 or IPv6 shared networks






RO

View and search for IPv4 and IPv6 shared networks in a network view




RO



Restart services from the DHCP tab

RO



RW



...

To define permissions for a specific IPv4 or IPv6 network and its DHCP ranges and fixed addresses, see see Applying Permissions and Managing Overlaps.
The following table lists the tasks admins can perform and the required permissions for IPv4 and IPv6 networks.:

Table 4.19 Network Permissions

GridMember(s)


Tasks

Anchor
bookmark547bookmark547
Anchor
bookmark548bookmark548

All IPv4 or IPv6 Networks

Specific IPv4 or IPv6 Network

All IPv4 or IPv6 Shared Networks

Specific DNS Zone

All IPv4 or IPv6 DHCP Ranges

All IPv4 or IPv6 Fixed Addresses

IPv4 or IPv6 Network Template

Create, modify, and delete IPv4 or IPv6 networks, DHCP ranges, and fixed addresses without assigned Grid members


RW







Create, modify, and delete IPv4 or IPv6 networks, DHCP ranges, and fixed addresses with assigned Grid members

RW

RW







Assign a Grid member to a specific IPv4 or IPv6 network and its DHCP ranges

RW


RW






Expand and join IPv4 or IPv6 networks


RW







Create IPv4 or IPv6 networks from templates


RW






RO

Create, modify, and delete an IPv4 or IPv6 network


RW







View IPv4 or IPv6 network properties and statistics, and search for DHCP ranges and fixed addresses in a specific network



RO






Create, modify, and delete IPv4 or IPv6 DHCP ranges and fixed addresses in a specific network



RW






Create and split an IPv4 or IPv6 network and automatically create a reverse DNS zone



RW


RW




Create, modify, and delete IPv4 or IPv6 shared networks




RW





View IPv4 or IPv6 shared networks




RO





Create, modify, and delete IPv4 or IPv6 DHCP ranges with an assigned member in a specific network

RW


RW






Create, modify, and delete IPv4 or IPv6 DHCP ranges






RW



View and search for IPv4 or IPv6 DHCP ranges in a specific network



RO






Create, modify, and delete IPv4 or IPv6 fixed addresses







RW


View and search for IPv4 or IPv6 fixed addresses in a specific network



RO






...

For information on setting permissions for fixed addresses, see Applying Permissions and Managing Overlaps.
The following table lists the tasks admins can perform and the required permissions for IPv4 and IPv6 fixed addresses.

Table 4.20 Permissions for Fixed Addresses/Reservations

...

For information about setting permissions for DHCP enabled host addresses, see Applying Permissions and Managing Overlaps.
The following table lists tasks that admins can perform and the required permissions for IPv4 and IPv6 DHCP enabled host addresses.
Table 4.21 Permissions for DHCP Enabled Host Addresses

...

host addresses:
Permissions for DHCP Enabled Host Addresses

Tasks

Specific IPv4 or IPv6 Network

All IPv4 or IPv6 DHCP enabled host Addresses

Create, modify, and delete IPv4 or IPv6 DHCP enabled host addresses in a specified network


RW

Modify and delete a specific IPv4 or IPv6 DHCP enabled host address


RW

View and search for all IPv4 or IPv6 DHCP enabled host addresses


RO

View and search for IPv4 or IPv6 DHCP enabled host addresses in a specified network


RO

...

For information on setting permissions for DHCP ranges, see Applying Permissions and Managing Overlaps. The following table lists the tasks admin can perform and the required permissions for DHCP ranges.:

Table 4.22 DHCP Ranges

GridMember(s)


Tasks

anchor

Administrative Permissions for IPv4 or IAdministrative Permissions for IPv4 or I
Anchor
bookmark552bookmark552
Anchor
bookmark553bookmark553
Anchor
bookmark554bookmark554

Specific IPv4 or IPv6 Network

All DHCP IPv4 or IPv6 Ranges

Specific IPv4 or IPv6 DHCP Range

MAC Address Filter

Create, modify, and delete IPv4 or IPv6 DHCP ranges with an assigned member or a failover association

RW


RW



Create, modify, and delete IPv4 or IPv6 DHCP ranges in a network with assigned members

RW

RW




Modify and delete an IPv4 or IPv6 DHCP range with an assigned member

RW



RW


View and search for all IPv4 or IPv6 DHCP ranges with an assigned member

RO



RO


View and search for IPv4 or IPv6 DHCP ranges in a network with assigned members

RO

RO




View and search for an IPv4 or IPv6 DHCP range with an assigned member

RO



RO


View and search for an IPv4 or IPv6 DHCP range without an assigned member




RO


Apply relay agent and option filters to an IPv4 DHCP range




RW


Apply a MAC address filter to an IPv4 DHCP range




RW

RO

...

There are three types of DHCP templates for IPv4 and IPv6 objects—network, DHCP range, and fixed address/reservation templates. To access any of these templates, a limited-access admin group must have read-only permission to the template. Limited-access admin groups cannot have read/write permission to the templates. Only superusers can create, modify and delete network, DHCP range, and fixed address templates. An admin group with read-only permission to the DHCP templates can view them and use them to create networks, DHCP ranges and fixed addresses, as long as they have read/write permissions to those DHCP resources as well.
You can set global read-only permission that applies to all DHCP templates, and you can set permissions to specific templates as well.
For information on setting permissions, see Applying Permissions and Managing Overlaps. The following table lists the tasks admins can perform and the required permissions for DHCP templates.Table 4.23 :

Permissions for DHCP Templates

...

Table 4.24 Permissions for Roaming Hosts

Administrative Permissions for MAC Addre

GridDHCPProperties

Tasks

Anchor

Administrative Permissions for MAC Addre
Anchor
bookmark557bookmark557

Specific IPv4 or IPv6 Roaming Host

All Roaming Host

Enable roaming hosts

RW



View roaming host

RO

RO

RO

Create, modify, and delete roaming hosts

RO


RW

Modify and delete roaming host

RO

RW


...

For information on setting permissions, see Applying Permissions and Managing Overlaps. The following table lists the tasks admins can perform and the required permissions for MAC address filters.:
Table 4.25
Permissions for MAC Filters

bookmark560

Tasks

Anchor
Administrative Permissions for the IPv4 Administrative Permissions for the IPv4
Anchor
bookmark558bookmark558
Anchor
bookmark559bookmark559
Anchor
bookmark560

All MAC Address Filters

Specific MAC Address Filter

Specific IPv4 DHCP Ranges

Create, modify, and delete MAC address filters

RW



Create, modify, and delete MAC address entries for a MAC address filter


RW


Modify and delete a MAC address filter


RW


Apply a MAC address filter to an IPv4 DHCP range


RO

RW

Delete a MAC address filter from an IPv4 DHCP range


RO

RW

View MAC address filters and their MAC address entries

RO



View a MAC address filter and its MAC address entries


RO


...