The master administrator can assign one or more logical router administrator to each logical router. Logical router administrators are confined to the context of the logical router(s) to which they are assigned. This means that any global configuration statements are restricted from them. This also means that command output is restricted to the context to which the logical router administrators are assigned.
To configure logical router administrators, include the logical-router logical-router-name statement at the [edit system login class class name] hierarchy level:
- [edit]
- system {
-
- login {
-
- class admin1 {
- permissions all;
- logical-router-1;
- }
-
- class admin2 {
- permissions view; # Gives users assigned to class admin2
the ability to view # but not to change the configuration.
- logical-router-2;
- }
-
- user user1 {
- class logical-router-1;
- }
-
- user user2 {
- class logical-router-2;
- }
- }
- }