ruckus unleashed users and roles

[LANTECH]

Dear all, 

i have ruckus unleashed network with 4 access point (02 x Master, 02 x Member) and the current firmware version of unleashed firmware is 200.15.6.212.27. 

my question is about the custom roles that we create as per our need. 

what i did? i create a role with only allow to specific Wlan. then i created a user and assigned that user this custom role. but when logged into the unleashed interface, i can still make changes to all Wlan. if i set the role to have access to the only and a specific Wlan, then why the role doesn't work. i mean that the user with this custom role should have changes permissions to the selected and specific Wlan. not other Wlan that i did not select. 
in simple words, the roles on ruckus unleashed interface is not working. 

why is that? 

need your help please. 

[Mayank]

Hi Lantech ,

Thank you for posting you query !!!

I understand that you would like to know about custom roles that we can create as per our need.

To create roles on the Ruckus Unleashed interface (typically used for managing wireless access points),

you'll need to define user roles primarily for guest access control, role-based access control (RBAC) for admin users, or WLAN user roles (if supported on your firmware version).

Here's a step-by-step guide depending on what you're trying to achieve:

1. Creating Admin User Roles (RBAC)
This allows you to create different admin accounts with restricted permissions.

Steps:
Log in to the Ruckus Unleashed Web UI (usually at https://unleashed.ruckuswireless.com or the AP IP).

Go to Admin & Services > Admin > Admin Users.

Click "Create" or "Add".

Fill in the following:

Username

Password

Access Level: Choose from available roles like:

Super Admin – Full access.

Read-Only Admin – View only.

Guest Pass Admin – Limited to guest access management.

Click Apply or OK to save.

2. Creating Guest Roles / WLAN User Roles
If you're using Guest WLANs, you can define access levels, VLANs, bandwidth limits, and session duration.

Steps:
Go to WiFi Networks > Create or Edit a WLAN.

Choose WLAN Type: Set to Guest Access.

Under Guest Access Configuration, define:

Role/VLAN Mapping (if available): You may assign VLAN tags or bandwidth policies.

Walled Garden: Specify what guests can access before login.

Session Timeout, Bandwidth Limits, etc.

Optionally, go to Access Control or Advanced Options to define:

ACLs (Access Control Lists)

MAC filters

VLAN assignment

Note: The term “Role” in Unleashed is not as customizable as in SmartZone. Role-based policies are more basic.

3. Creating Guest Pass Admins
This is a limited role for front-desk staff or temporary personnel to generate guest passes.

Steps:
Go to Admin & Services > Admin > Admin Users.

Click Add.

Set the Role to Guest Pass Admin.

Provide the desired username and password.

Save changes.

Please let us know how it goes.

Moving Forward If this issue is not resolved , Please log a ticket with the below link so that we will help you further.

https://support.ruckuswireless.com/contact-us

I hope this information helps you

Please feel free to leave us a message if any concerns

Note: Please feel free to mark the post as ACCEPTED SOLUTIONS if its addressed your query.

Thanks
Mayank

[Chandini]

Hi Lantech ,

Thank you for reaching us. Could you please let us know if the procedure you are following is as mentioned in the below link

• https://docs.commscope.com/bundle/unleashed-200.17-onlinehelp/page/GUID-17415E04-DFA3-4AE2-B707-48C5...
• https://docs.commscope.com/bundle/unleashed-200.17-onlinehelp/page/GUID-50F7535A-86CB-49F1-AC26-A866...

What are the AP 's models you are currently using in the network ? Are their any error messages that is noticed ? If yes would you be able to share a screenshot with us ?

Thank you 

[LANTECH]

Dear Chandni,

we are using Ruckus R510 Access Points on our Unleashed network with unleashed firmware version 200.15.6.212.27.

i created the role, then the user, and then link the role to that user as per the link you mentioned in your email. 

I get no errors. 

I will explain it here with images attached. 

1-   I first created a role with a name monitor, then I allowed access to only one Wlan that is "maq-ap", so that the user with this role will be allowed to monitor the only specific Wlan (maq-ap). 

2-   Next I created another role named "testadmin", so that the user with this role will be allowed to make changes to the only Wlan (maq-ap"

3-   Next I created first user with username "test" and linked the role " monitor" to it. i logged in with "test" user. this user was only allowed for monitoring which was fine as far as the administration permission is concerned. but all the Wlan were visible there for this user, which i don't want to. this user must have only access to the Wlan "maq-ap". 

4-  i created 2nd user with username "test1"  and link the second role with administration permission "super user". after logging in, this user was working fine as far as the administration permissions are concerned. i mean this user could make changes to the Wlan. but the user could make changes to all Wlan not a specific Wlan (maq-ap). while i have allowed to make changes to the only one Wlan (maq-ap) in the testadmin role. 

Summary:

the administration permissions (super user and monitoring) is working fine. but access to specific Wlan is not working. 

hope you got my point. 

i am also attaching the images for reference.

[Chandini]

Hi Lantech ,

Thank you for reaching us. Please give me sometime to look into this and get back to you. 

Thank you