How do I restrict an administrator’s scope to specific instances using NetScaler MAS

MAS supports many RBA scenarios. Let us take a look at one of the use cases:

• Assume that the super administrator would like to restrict an administrators view to a specific set of instances only.

Configuration on MAS GUI

  1. Navigate to System -> User Authentication -> Group and create a group/ select the group to which you wish to apply the RBA settings. Ensure that all the administrators whose access you wish to restrict are a part of this group.

  2. Uncheck the ‘All Instances’ box and select the set of instances to which you wish to grant the administrator access to. Once this is done, click on ‘Next’ and then click on ‘Finish’.


Once these configuration settings are complete, the administrator(s) belonging to this group will have access to limited NetScaler instances after login. Below screenshots show the view of super administrator as compared to the view of the administrator.

Super-administrator’s view

Screenshot: Administrator’s view (as per defined RBA settings)

User-added image


  • No Related Posts

Leave a Reply