Bug ID 2447941: Manager role cannot modify a virtual server that uses a port list or address list

Last Modified: Sep 07, 2026

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.1.3.2, 17.1.3.4, 17.1.3.5, 17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6, 17.5.1.8, 17.5.1.9, 21.1.0, 21.1.0.1, 21.1.0.2

Opened: Jul 29, 2026

Severity: 3-Major

Symptoms

A user account assigned the Manager role cannot save changes to a virtual server that uses a port list or address list. The system rejects the change with: Access Denied: user (<username>) does not have modify access to object (traffic_matching_criteria)

Impact

The Manager-role user cannot create, modify, or delete the affected virtual server configuration. Existing virtual servers continue to process traffic normally; there is no traffic disruption

Conditions

- User account assigned the built-in Manager role - Virtual server configured with a port list or address list as its source or destination

Workaround

Use an account assigned the Administrator role to create or modify the virtual server

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips