As noted in remote access controls, Cloud.Red Remote Access can be configured for Account, Agents, and Device Groups contexts.

​
SSO Configuration in Cloud.Red Remote Access

When leveraging SSO, Cloud.Red Remote Access also provides granular per-user access roles for each of the Account, Agents, and Device Groups contexts. The available roles are:
  • None
  • guest
  • operator
  • manager
  • admin
These roles align with built-in roles found in BIG-IP appliance. For additional information about these roles, please visit AskF5 Home / Knowledge Center / BIG-IP Systems: User Account Administration / User Roles.

​
Managing Additional Service Accounts

When leveraging these roles, Cloud.Red will manage these additional service accounts on the devices:
  • wtit_client_guest
  • wtit_client_operator
  • wtit_client_manager
  • wtit_client_admin

​
Note on Permissions

Unlike the controls, it is important to note that permissions need to be applied individually to each context for Account, Agents, and Device Groups. Inheritance is expected in an upcoming system update.