allow-commands (Op Scripts)
Statement introduced in Junos OS Release 14.2.
Specify a regular expression that defines which operational mode commands to explicitly allow during execution of a local op script.
By default, when a user executes a script, the system does not permit the user to execute operational mode commands within a script for which their login class does not normally have permission to execute. You can explicitly enable the script to execute certain operational mode commands regardless of the permissions of the user invoking the script.
Execution of configuration mode commands is not supported by this feature.
Remote op scripts that are executed using the op url command do not support executing unauthorized operational mode commands
even when you configure the
Required Privilege Level
maintenance—To view this statement in the configuration.
maintenance-control—To add this statement to the configuration.