OPERATIONAL DEFECT DATABASE
...
...
A lower-privileged user, for instance one with a role of guest or operator, is unable to list configuration in tmsh. If the user runs show running-config or list the will see the following: Unexpected Error: Can't display all items, can't get object count from mcpd If the user tries to run list security ip-intelligence fqdn-entity, the following error will occur: 01070823:3: Read Access Denied: user (oper) type (IP intelligence fqdn)
The user is unable to show running config, list, list security.
User with a role of guest, operator or anything other role besides admin.
Be specific with your list/show commands to include the module, component, and properties you are looking for. As long as you avoid directly or indirectly calling "list security ip-intelligence fqdn-entity", the command should work. Here are a few examples: Working commands: # list ltm # list security ip-intelligence blacklist-category Non-working commands: # list # list security # list security ip-intelligence Another option is to create an alternative user role. For example, a user with Auditor role.
None
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
