This chapter provides details about the permission flags that grant access to operational mode commands and configuration statements.
![]() |
Note: Only permission flags that grant a specific set of access privileges are listed in this chapter. Those permission flags that provide no access, or provide access to all commands and statements do not appear in this list. For a complete list of permission flags, see Table 7. |
Permission flags are used to grant a user access to operational commands and configuration statements. By specifying a specific permission flag on that user's login class at the [edit system login class] hierarchy level, you grant the user access to the corresponding commands and configuration statements. To grant access to all commands and configuration statements, use the all permission flag.
For permission flags that grant access to configuration statements, the flag grants read-only privilege to that configuration. For example, the interface permission flag grants read-only access to the [edit interfaces] hierarchy level. The -control form of the flag grants read-write access to that configuration. Using the preceding example, interface-control grants read-write access to the [edit interfaces] hierarchy level.
![]() |
Note: Each command listed represents that command and all subcommands with that command as a prefix. Each configuration statement listed represents the top of the configuration hierarchy to which that flag grants access. |
The permission flags that effect access to operational mode commands and configuration statements are listed in alphabetical order in this chapter. Each permission flag is listed with the operational commands and configuration statements for which that flag grants access.