[Contents] [Prev] [Next] [Index] [Report an Error]

Examples Using Privilege Group Membership

In each of the following examples, privilege groups are at the default setting, where privilege group 0 is reachable from every privilege group, 15 contains 14, 14 contains 13, 13 contains 12, and so forth. The commands in each example change the privilege group settings from the default.

Example 1



host1(config)#privilege-group membership clear
11 

host1(config)#privilege-group membership 15
add 10

In Example 1:

Privilege group 11 does not contain any privilege groups
Privilege group 15 contains group 10. Therefore, privilege group 10 and all groups contained or reachable from privilege group 10 are now reachable from privilege group 15.
Because privilege group 15 already contains privilege group 14, all groups with the exception of privilege group 11 are reachable from privilege group 15.
A command that is in privilege group 11 can only be executed by a user at privilege 11. A user at any other privilege does not have access to privilege group 11 commands.

Example 2



host1(config)#privilege-group membership 14
remove 13

In Example 2:

Privilege group 14 does not contain any privilege groups.
Privilege group 15 contains two groups: 14 and 10. The privilege groups 0, 1, 2, 4, 5, 6, 7, 8, 9, 10, and 14 are reachable from privilege group 15.
A user at privilege 15 does not have access to commands in privilege groups 11, 12, or 13.

Example 3



host1(config)#privilege-group membership clear
13 

host1(config)#privilege-group membership 13
add 10

In Example 3:

Commands are executed in the following sequence: 15 contains 14, 14 contains 13, 13 contains 12, and so forth,
Privilege group 13 contains one privilege group: privilege group 10.
The privilege groups 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, and 10 are reachable from privilege group 13.

Example 4



host1(config)#privilege-group membership 12
remove 11 

host1(config)#privilege-group membership 12
add 5 

host1(config)#privilege-group membership 11
add 5

In Example 4:

Commands are executed in the following sequence: 15 contains 14, 14 contains 13, 13 contains 12, and so forth.
Privilege group 12 contains one privilege group: the privilege group 5.
Privilege group 11 contains one privilege group: the privilege group 5.
Privilege groups 0, 1, 2, 3, 4, 5 are reachable from privilege groups 12 and 11.

Example 5



host1(config)#privilege-group membership clear
9 8 7 

host1(config)#privilege-group membership 7
add 1 

host1(config)#privilege-group membership 8
add 14

In Example 5:

Privilege group 9 contains no privilege groups.
Privilege group 8 contains group 14.
Privilege group 7 contains group 1.

Example 6



host1(config)#privilege-group alias 13 LI 

host1(config)#privilege-group alias 10 dailyAdmin 

host1(config)#privilege-group alias 7 weekendAdmin 

host1(config)#privilege-group alias 6 dailyTroll 

host1(config)#privilege-group alias 5 basicUser  

host1(config)#privilege-group alias 0 minUser 

host1(config)#privilege-group alias 15 superUser

In Example 6, a number or name can specify the seven privilege groups 0, 5, 6, 7, 10, 13, and 15.

Example 7



host1(config)#privilege-group membership clear
dailyAdmin 

host1(config)#privilege-group membership dailyAdmin
add dailyTroll

In Example 7, privilege group 10 alias dailyAdmin has one member: privilege group 6 alias dailyTroll.

Example 8



host1(config)#no privilege-group membership 9

Example 8 reverts one privilege group membership to its default setting. Prior to the execution of this command, the following group memberships were in place:

group	member	reachable
8	12	12,0
9	--	0
10	9	9,0
11	10	10,9,0
12	11	11,10,9,0

Reverting privilege group 9 to its default gives it one member: privilege group 8. This creates the circular dependency: 8 contains 12, 12 contains 11, 11 contains 10, 10 contains 9, and 9 contains 8.

Example 9



host1(config)#no privilege-group membership

In Example 9, privilege group membership reverts to the default setting. All privilege groups revert to hierarchical settings: 15 contains 14, 14 contains 13, 13 contains 12, and so forth. Privilege group 0 is reachable from every privilege group.

Example 10



host1(config)#no privilege-group membership
7

In this example, one privilege group membership reverts to its default setting. Privilege group 7 contains group 6.

Example 11



host1(config)#no privilege-group alias

In Example 11, all alias settings are removed.

Example 12

host1#show privilege group

privilege      privilege          directly          all
 group          group              reachable      reachable
               alias              groups            groups *
----------    ----------        --------       -----------------
0             minUser           --             --
1             --                --             0
2             --                1              0 1
3             --                2              0 1 2
4             --                3              0 1 2 3
5             basicUser         4              0 1 2 3 4
6             dailyTroll        5              0 1 2 3 4 5
7             weekendAdmin      1              0 1
8             --                14             0 14
9             --                --             0
10            dailyAdmin        6              0 1 2 3 4 5 6
11            --                5              0 1 2 3 4 5
12            --                5              0 1 2 3 4 5
13            LI                10             0 1 2 3 4 5 6 10
14            --                --             0
15            superUser         10 14          0 1 2 3 4 5 6 10 14 15

*Privilege Group can reach itself

Example 12 shows privilege group overrides in effect.

Example 13

host1#show privilege group 15 superUser
The following groups are directly reachable:
14
dailyAdmin

The following groups are reachable:
1
14
2
3
4
basicUser
dailyAdmin
dailyTroll
minUser

In Example 13, groups 14 and dailyAdmin are directly reachable and groups 1, 14, 2, 3, 4, basicUser, dailyAdmin, dailyTroll, and minUser are reachable.

privilege

Use to change the privilege level of any command within a specified mode.
Example 1host1(config)#privilege exec level 12 terminal width
Example 2host1(config)#privilege exec all level 5 terminal
Use the all keyword to change the privilege level of groups of commands. For more information, see Setting Privilege Levels for Multiple Commands.
Use the reset version to restore the default privilege level for the command; issuing this command results in the show configuration command not showing the default privilege setting for the command.
Use the no version to restore the default privilege level for the command; issuing this command results in the show configuration command showing the default privilege level of the command in its output.

Note: You must access the CLI at privilege level 15 to view or use this command.
privilege

privilege-group alias

Use to give the privilege group name alias to the privilege group.
Examplehost1(config-if)#privilege-group alias
Use the no version to remove the privilege group alias.
See privilege-group alias.

privilege-group membership

Use to add the member group to or remove the member group from the privilege group.
Examplehost1(config-if)#privilege-group membership
Use the no version to restore one or all privilege groups to the default settings. When all privilege groups are reset to the default settings, the privilege group membership is hierarchical.
See privilege-group membership.

privilege-group membership clear

Use to clear a privilege group or all members from a privilege group.
Examplehost1(config-if)#privilege-group membership clear
There is no no version.
See privilege-group membership clear.

[Contents] [Prev] [Next] [Index] [Report an Error]