Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


allow-commands (Op Scripts)



Hierarchy Level

Release Information

Statement introduced in Junos OS Release 14.2.


Specify a regular expression that defines which operational mode commands to explicitly allow during execution of a local op script.

By default, when a user executes a script, the system does not permit the user to execute operational mode commands within a script for which their login class does not normally have permission to execute. You can explicitly enable the script to execute certain operational mode commands regardless of the permissions of the user invoking the script.


Execution of configuration mode commands is not supported by this feature.


Remote op scripts that are executed using the op url command do not support executing unauthorized operational mode commands even when you configure the allow-commands statement.

Required Privilege Level

maintenance—To view this statement in the configuration.

maintenance-control—To add this statement to the configuration.