Bug ID 1935917: Users with custom permissions but lacking admin privileges are unable to view certificates and keys via the web UI or the iControl REST API.

Last Modified: Jul 10, 2026

Affected Product(s):
BIG-IQ ADC(all modules)

Known Affected Versions:
8.4.0

Opened: May 08, 2025

Severity: 3-Major

Symptoms

- Certificates and keys were visible to the affected user on versions before v8.4.0. - Non-admin users with appropriate permissions are now unable to view the list of certificates and keys via the UI or iControl REST API. - Executing the following command for the affected user (e.g., f5testuser) returns an empty set: curl -su 'f5testuser' http://localhost:8100/mgmt/cm/adc-core/working-config/sys/file/ssl-cert | jq . Enter host password for user 'f5testuser': { "items": [], "generation": 2, "lastUpdateMicros": 1755557580126930, "kind": "cm:adc-core:working-config:sys:file:ssl-cert:adcsslcertcollectionstate", "selfLink": "https://localhost/mgmt/cm/adc-core/working-config/sys/file/ssl-cert" }

Impact

Users without admin privileges but with custom permissions are unable to manage certificates and keys via the UI or the iControl REST API.

Conditions

- BIG-IQ running on v8.4.0

Workaround

There is no workaround. Install an EHF with the fix for ID1935917 on version 8.4.0 to resolve this issue.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips