Troubleshooting: Resetting Role Based Access Control Back to Default – SecureAuth Support

Version Affected: All

Overview

Once Role Based Access Control (RBAC) is activated in the Admin Console, it stays enabled even after every rule under it is removed. Administrators continue to see You are not assigned an access control rule when trying to access the Admin Console.

Cause

Once the Activate Access Control button has been clicked, SecureAuth administrators must be explicitly granted access through Access Control rules -- there is no toggle in the Admin Console to turn Access Control back off once it's been activated.

The Admin Console's Access Control page, showing the Activate Access Control button and the notice that access must be explicitly granted once activated.

Resolution:

To resolve this:

In the realm's web.config file, search for the word rbac.
You'll find a line similar to:

A web.config snippet with the rbac.enabled key highlighted, set to a value of True.

Change the value from True to false. This is case-sensitive.
Save the web.config.
Restart IIS.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.