The master administrator can assign one or more logical system administrators to each logical system. Logical system administrators are confined to the context of the logical system(s) to which they are assigned. This means that any global configuration statements are restricted from them. This also means that command output is restricted to the context to which the logical system administrators are assigned.
To configure logical system administrators, include the logical-system logical-system-name statement at the [edit system login class class name] hierarchy level:
- [edit]
- system {
-
- login {
-
- class admin1 {
- permissions all;
- logical-system-1;
- }
-
- class admin2 {
- permissions view; # Gives users assigned to class admin2
the ability to view # but not to change the configuration.
- logical-system-2;
- }
-
- user user1 {
- class logical-system-1;
- }
-
- user user2 {
- class logical-system-2;
- }
- }
- }