Can i assign multiple Roles in a Remote Role Group when integrating Active Directory with BIG-IP?

Hi,

You can only have one role for a user in the remote role groups. Your best bet is to give the user the role with that covers what abilities they need to perform without giving them extra. You could also create multiple accounts per user (eg. user1_cert, user1_user, user1_audit) and then they can login with the user they need to perform their duties.

When you setup remote auth the only 2 users that will still auth locally are root (CLI) and admin (GUI). All other users will be sent to the remote auth for authentication.

Seth

Hi Seth,

Thank you for the information. However, our client's AD administrator doesn't allow multiple usernames for a single user and therefore the suggestion of creating multiple usernames for a single user is not possible. Also, the only user role that will be able to do user management, certificate management and audit at the same time is an Administrator role. But the Administrator Role can also create VS,Pool,VLANs,etc. and our client doesn't want that user (ex: jsmith) to also be able to create VS,Pool,VLANs,etc. -_-

So i guess there is no other workaround for this kind of authentication requirements?