Manage admin partitions of Citrix ADC instances

You can configure admin partitions on your Citrix Application Delivery Controller (Citrix ADC) instances so that different groups in your organization are assigned different partitions on the same Citrix ADC instance. You can assign a network administrator to manage multiple partitions on multiple Citrix ADC instances.

Citrix Application Delivery Management (Citrix ADM) provides a seamless way of managing all partitions owned by an administrator from a single console. You can manage these partitions without disrupting other partition configurations.

To allow multiple users to manage different admin partitions, you have to create groups and then, assign users and partitions to those groups. For more information about creating a group or user, see Create a user and Create a group.

A user can view and manage only the partitions in the group to which the user belongs. When you discover a Citrix ADC instance, the admin partitions configured on that Citrix ADC instance get added to the system automatically. Each admin partition is considered as an instance in Citrix ADM.

View admin partitions

Consider that you have two Citrix ADC VPX instances and two admin partitions are configured on each instance. For example, Citrix ADC instance 10.xx.xx.160 has partition-1 and partition-2 and the 10.xx.xx.20 instance has first-partition and second-partition.

Perform the following steps to view admin partitions:

  1. Navigate to Networks > Instances > Citrix ADC.

  2. In the VPX tab, click Partitions.

    Citrix ADC admin partitions

For example, when you create a group with the following conditions:

  • In the Authorization Settings tab, the “10.xx.xx.20-second-partition” and “10.xx.xx.160-partition-1” instances are selected.

    Select admin partitions

  • “User1” is assigned to the group.

    Assign a user

User1 can view and manage only those partitions that are added to the group. However, the partitions that are not added to the group are restricted to the user even though they belong to the same instances.

In this example, 10.xx.xx.20-first-partition and 10.xx.xx.160-partition-2 are restricted. Because the instances are not added to the group where the user is assigned.

If you want a different user to manage the admin partitions 10.xx.xx.20-first-partition and 10.xx.xx.160-partition-2, create a group with following conditions:

  • In the Authorization Settings tab, select the 10.xx.xx.20-first-partition and 10.xx.xx.160-partition-2 instances.

  • Assign the required user to the group.

This group enables the assigned user to view and manage the selected admin partitions.

View the revision history difference

Revision history difference for admin partition allows you to view the difference between the five latest configuration files for a partitioned Citrix ADC instance. You can compare the configuration files against each other (example Configuration Revision - 1 with Configuration Revision -2) or against the current running/saved configuration with Configuration Revision. Along with the differences in configuration, the correction configurations are also shown. You can export all the corrective commands to your local folder and correct the configurations.

To view the revision history difference:

  1. Navigate to Networks > Configuration Audit. The Configuration Audit dashboard displays various reports. Click the number displayed in the center of the donut chart.

    localized image

  2. Select the partitioned Citrix ADC instance.

  3. From the Action box, click Revision History Diff.

    localized image

  4. On the Revision History Diff page, select the files that you want to compare. For example, compare the Saved Configuration with Configuration Revision-2 and then, click Show configuration difference.

    You can then view the differences between the five latest configuration files for the selected partitioned Citrix ADC instance. The following is an example admin partition that has three saved configurations:

    localized image

    You can also view the corrective configuration commands and export these corrective commands to your local folder. These corrective commands are the commands that need to be executed on the base file to get the configuration to the desired state (configuration file that is being used for comparison).

    localized image

The saved configurations on an admin partition and the instance are different. In the following example, the 10.xx.xx.20 instance has five saved configurations where the admin partition of this instance has three different saved configurations:

Admin partition and instance's revision history difference

View the template vs running difference

Audit templates for partition allow you to create a custom configuration template and associate it with a partition instance. Any variation in the running configuration of the instance with the audit template is shown in the “Template vs Running diff” column of the Audit Reports page. Along with the differences in configuration, the correction configurations are also shown. You can also export all the corrective commands to your local folder and correct the configurations.

  1. Navigate to Networks > Configuration Audit. The Configuration Audit dashboard displays various reports. Click the number displayed in the center of the donut chart.

    localized image

  2. In the Audit Reports page, click the Diff Exists hyperlink under the Template vs Running Diff column.

    If there is any difference between the audit template and the running configuration, the difference is shown as a hyperlink. Click the hyperlink to view the differences if there is any. Along with the differences in configuration, the correction configurations are also shown. You can also export all the corrective commands to your local folder and correct the configurations.

    localized image

To export the report of this dashboard:

To export the report of this page, click the Export icon on the top right side of this page. On the Export page, you can do one of the following:

  1. Select Export Now tab. To view and save the report in PDF, JPEG, PNG, or CSV format.

  2. Select Schedule Export tab. To schedule the report daily, weekly, or monthly and send the report over email or slack message.

Note

  • If you select Weekly recurrence, ensure that you select the weekdays on which you want the report to be scheduled.
  • If you select Monthly recurrence, ensure that you enter all the days that you want the report to be scheduled separated by commas.