There are eight different types of permissions that you can specify for each restricted user role. You can specify any of these management task permissions to the Operator and Application Editor user roles.

1. In the navigation pane, click System > Users. The Users list screen opens.
2. Click the Create button. The New User screen opens.
3. In the User Name field, type the administrative-level user name that you are currently using to manage the BIG-IP devices in your network.
4. In the New and Confirm fields, type the password for the user.
5. From the Role list, select one of the following roles.

   Option	Description
   Administrator	Grants user complete access to all objects on the system and permission to perform configuration synchronization for a BIG-IP device service clustering configuration.
   Operator	Grants user permission to enable or disable existing nodes and pool members.
   Application Editor	Grants user permission to modify existing nodes, pools, pool members, and monitors.

   If you select another user role, managed devices cannot authorize the user to perform management tasks, and the user cannot initiate tasks using the Enterprise Manager system.
6. From the Partition Access list, select an option to specify which administrative partitions the new user can access.
7. From the Terminal Access list, select Enabled to allow the user command-line access to Enterprise Manager.
8. Click the Repeat button to add another user, or click the Finished button to return to the User list screen.

1. In the navigation pane, click System > Users. The Users list screen opens.
2. On the menu bar, click Authentication. The Authentication screen opens.
3. Click the Change button.
4. From the User Directory list, select an option. The screen refreshes to display options specific to the authentication source you selected.
5. Specify the configuration settings for the remote authentication server. Refer to the online help for information specific to each authentication setting.
6. Click the Finished button to save your changes.

1. On the Main tab, click Enterprise Management > Access Control > Role Permissions.
2. For each restricted user role, select or clear the check box next to the permission you want to modify.
3. Click Apply to save your changes.

1. On the Main tab, click Enterprise Management > Access Control > User List.
2. To search for a specific user, in the Search field, type all or part of the name and click Search.
3. Click the name of a user to view the devices to which this user has access privileges.

   The screen displays the devices associated with the selected user.

1. On the Main tab, click Enterprise Management > Tasks.
2. Click the New Task button.
3. For the User Access setting, select Copy User Access Configuration.
4. Click Next.
5. From the Source Device list, select the device from which you want to replicate user account information.
6. For the Configuration Data setting, select the type of configuration data you want to replicate from the source device.
   • Users
   • Shell Access
   • Authentication
7. From the Device List, you can select a group of devices to narrow the number of devices displayed.
8. Select the check box next to each compatible device to which you want to copy the source device's configuration.
9. Click the Next button.
10. From the Device Users list, select an option.

    Option	Description
    Add users not already present on device	Adds user accounts to the destination device instead of replacing the users with those on the source device.
    Replace users on device	Deletes all user accounts on the destination device and replaces them with the user accounts from the source device.

11. From the Device Error Behavior list, select the action you want Enterprise Manager to take in the event that the task fails on one of the devices.
    • Continue task on remaining devices
    • Cancel task on remaining devices
12. Click Next. The Task Review screen opens, and you can confirm the task details.
13. Click the Start Task button. The Task Properties page displays the progress for the task.

1. On the Main tab, click Enterprise Management > Tasks.
2. Click the New Task button.
3. For the User Access setting, select Change User Password.
4. Click Next.
5. From the User Name list, select the user for which you want to change the password.
6. From the Device List, you can select a group of devices to narrow the number of devices displayed.
7. Select the check box next to each device for which you want to change the password.
8. In the Password field, type a new password.
9. In the Confirm field, re-type the password.
10. Click Next.
11. From the Device Error Behavior list, select the action you want Enterprise Manager to take in the event that the task fails on one of the devices.
    • Continue task on remaining devices
    • Cancel task on remaining devices
12. Click Next.
13. Click the Start Task button. The Task Properties page displays the progress for the task.