[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Defining Access Privileges to Individual Configuration Mode Commands

The following examples show how to configure access privileges to individual configuration mode commands.

If the following statement is included in the configuration and the user’s login class permission flag is set to all, the user cannot configure telnet parameters:



[edit system login class class-name]
user@host# set deny-configuration "system
services telnet"

If the following statement is included in the configuration and the user’s login class permission flag is set to all, the user cannot issue login class commands within any login class whose name begins with the letter m:



[edit system login class class-name]
user@host# set deny-configuration "system
login class m.*"

If the following statement is included in the configuration and the user’s login class permission flag is set to all, the user cannot issue configuration mode commands at the system login class or system services hierarchy levels:



[edit system login class class-name]
user@host# set deny-configuration "(system
login class) | (system services)"

[Contents] [Prev] [Next] [Index] [Report an Error]