Login Class Permission Options for the SRC Software
Table 1 lists the permission options available when you configure permissions with the SRC CLI and the C-Web interface. The SRC software also provides a default set of system login classes that have permissions preset.
Table 1: Login Class Permission Options
Permission | Description |
|---|---|
admin | SRC CLI—Can view user account information in configuration mode and with the show configuration command. C-Web interface—Can view user account information by accessing the Monitor>CLI>Authorization. |
admin-control | SRC CLI—Can view user accounts and configure them at the [edit system login] hierarchy level. C-Web interface—Can view user accounts and configure them by accessing Configure>System>Login. |
all | SRC CLI and C-Web interface—Has all permissions. |
clear | SRC CLI—Can clear (delete) information learned from the network that is stored in various network databases using the clear commands. C-Web interface—Can clear (delete) information learned from the network that is stored in various network databases by accessing Manage>Clear. |
configure | SRC CLI—Can enter configuration mode using the configure command. C-Web interface—Can access the Configure task and subtasks. |
control | SRC CLI and C-Web interface—Can perform all control-level operations (all operations configured with the -control permission). |
field | SRC CLI and C-Web interface—Reserved for field (debugging) support. |
firewall | SRC CLI—Can view the firewall filter configuration in configuration mode. C-Web interface—Can view the firewall filter configuration by accessing Monitor>SAE>Services. |
firewall-control | SRC CLI—Can view and configure firewall filter information at the [edit firewall] hierarchy level. C-Web interface—Can view and configure firewall filter information by accessing Configure>Services. |
interface | SRC CLI—Can view the interface configuration in configuration mode and with the show configuration operational mode command. C-Web interface—Can view the interface configuration by accessing Monitor>Interfaces. |
interface-control | SRC CLI—Can view chassis, class of service, groups, forwarding options, and interfaces configuration information. Can configure chassis, class of service, groups, forwarding options, and interfaces at the [edit] hierarchy level. C-Web interface—Can view chassis, class of service, groups, forwarding options, and interfaces configuration information. Can configure chassis, class of service, groups, forwarding options, and interfaces by accessing the Configure task and subtasks. |
maintenance | SRC CLI—Can perform system maintenance, including starting a local shell on the system and becoming the superuser in the shell (by issuing the su root command), and can halt and reboot the system (using the request system commands). C-Web interface—Can perform system maintenance, including halting and reboot the system, by accessing Manage>Request>System. |
network | SRC CLI and C-Web interface—Can access the network by entering the SSH and telnet commands. |
reset | SRC CLI—Can restart software processes using the restart command, enable components using the enable command, and disable components using the disable command. C-Web interface—Can restart software processes by accessing Manage>Restart, enable components by accessing Manage>Enable, and disable components by accessing Manage>Disable. |
routing | SRC CLI—Can view general routing information in configuration and operational modes. C-Web interface—Can view general routing information by accessing Monitor>SAE>Route. |
routing-control | SRC CLI—Can view and configure general routing at the [edit routing-options] hierarchy level. C-Web interface—Can view general routing and configure general routing by accessing Configure>Routing Options. |
secret | SRC CLI and C-Web interface—Can view passwords and other authentication keys in the configuration. |
secret-control | SRC CLI—Can view passwords and other authentication keys in the configuration and can modify them in configuration mode. C-Web interface—Can view passwords and other authentication keys in the configuration and can modify them by accessing Configure>System>Login. |
security | SRC CLI—Can view security configuration in configuration mode and with the show configuration operational mode command. C-Web interface—Can view security configuration by accessing Monitor>Security>Certificate. |
security-control | SRC CLI—Can view and configure security information at the [edit security] hierarchy level. C-Web interface—Can view security information and configure security information by accessing Manage>Request>Security. |
service | SRC CLI and C-Web interface—Can view service and policy definitions. C-Web interface—Can view service definitions by accessing Monitor>SAE>Services and policy definitions by accessing Monitor>SAE>Policies. |
service-control | SRC CLI—Can view and modify service and policy definitions. C-Web interface—Can view and modify service and policy definitions by accessing Configure>Services and Configure>Policies. |
shell | SRC CLI and C-Web interface—Can start a local shell by entering the start shell command. |
snmp | SRC CLI—Can view Simple Network Management Protocol (SNMP) configuration information in configuration and operational modes. C-Web interface—Can view Simple Network Management Protocol (SNMP) configuration information by accessing Monitor>SAE>Statistics. |
snmp-control | SRC CLI—Can view SNMP configuration information and configure SNMP (at the [edit snmp] hierarchy level). C-Web interface—Can view SNMP configuration information and configure SNMP by accessing Configure>SNMP. |
subscriber | SRC CLI—Can view information about subscriber definitions. C-Web interface—Can view information about subscriber definitions by accessing Monitor>SAE>Subscribers. |
subscriber-control | SRC CLI—Can view and control information about subscriber definitions. C-Web interface—Can view information about subscriber definitions and control information about subscriber definitions by accessing Configure>Subscribers. |
system | SRC CLI—Can view system-level information in configuration and operational modes. C-Web interface—Can view system-level configuration information by accessing Monitor>System. |
system-control | SRC CLI—Can view system-level configuration information and configure it at the [edit system] hierarchy level. C-Web interface—Can view system-level configuration and configure it by accessing Configure>System. |
view | SRC CLI—Can use various commands to display current systemwide, routing table, and protocol-specific values and statistics. C-Web interface—Can access various Monitor subtasks to display current systemwide, routing table, and protocol-specific values and statistics. |
view-configuration | SRC CLI and C-Web interface—Can view all system configurations, excluding any secret configuration. |
To review the default system login classes, see Predefined Login Classes for the SRC Software.