Configure permissions for individual configuration mode commands:
- [edit]
- system {
-
- login {
- # This login class has operator privileges and the additional
ability to issue
- # commands at the system services hierarchy level.
-
- class only-system-services {
- permissions [ configure ];
- allow-configuration "system services";
- }
- # This login class has operator privileges but cannot issue
any system
- # services commands.
-
- class all-except-system-services {
- permissions [ all ];
- deny-configuration "system services";
- }
- }
- }