OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Managing Switch User Accounts
Configuring Privileges for a User
Configuring Privileges for a User
To configure privileges for a user, enter the user command with the read-only or read-write option and
the desired CLI command domain names or command family names. The read-only option provides
access to show commands; the read-write option provides access to configuration commands and show
commands. Command families are subsets of command domains.
If you create a user without specifying any privileges, the user’s account will be configured with the privileges
specified for the default user account.
Command domains and families are listed here:
Domain
domain-admin
domain-system
domain-physical
domain-network
domain-layer2
domain-service
domain-policy
domain-security
Corresponding Families
file telnet debug
system aip snmp rmon webmgt config
chassis module interface pmm health
ip rip ospf bgp vrrp ip-routing ipx ipmr ipms rdp
ospf3 ipv6
vlan bridge stp 802.1q linkagg ip-helper
dns
qos policy slb
session avlan aaa
In addition to command families, the keywords all or none may be used to set privileges for all command
families or no command families respectively.
An example of setting up user privileges:
-> user thomas read-write domain-network ip-helper telnet
User thomas will have write access to all the configuration commands and show commands in the
network domain, as well as Telnet and IP helper (DHCP relay) commands. The user will not be able to
execute any other commands on the switch.
Use the keyword all to specify access to all commands. In the following example, the user is given read
access to all commands:
-> user lindy read-only all
Note. When modifying an existing user, the user password is not required. If you are configuring a new
user with privileges, the password is required.
The default user privileges may also be modified. See “Default User Settings” on page 6-7.
OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 6-15