The NSX Manager must assign users/accounts to organization-defined roles configured with approved authorizations.
An XCCDF Rule
Description
<VulnDiscussion>The lack of authorization-based access control could result in the immediate compromise and unauthorized access to sensitive information. Users must be assigned to roles which are configured with approved authorizations and access permissions. The NSX Manager must be configured granularly based on organization requirements to only allow authorized administrators to execute privileged functions. Role assignments should control which administrators can view or change the device configuration, system files, and locally stored audit information.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-263203r977376_rule
- Severity
- High
- References
- Updated
Remediation - Manual Procedure
To create a new role with reduced permissions, do the following:
From the NSX Manager web interface, go to System >> Settings >> User Management >> Roles.
Click "Add Role", provide a name and the required permissions, and then click "Save".