Defining Junos OS Login Classes

To define a login class and its access privileges, include the class statement at the [edit system login] hierarchy level:

[edit system login]class class-name {allow-commands "regular-expression"; allow-configuration "regular-expression";deny-commands "regular-expression"; deny-configuration "regular-expression"; idle-timeout minutes;permissions [ permissions ]; }