Examples: Configuring Access Privileges for SRC Operational Mode Commands
The following example allows access to the request system reboot command for the login class operator-and-boot that has operator privileges defined by the clear, network, reset, and view permissions.
[edit system login class operator-and-boot]
user@host# set permissions [ clear network
reset view ]
user@host# set allow-commands "request system
reboot"
The following example denies access to set commands for the login class operator-no-set that has operator privileges defined by the clear, network, reset, and view permissions.
[edit system login class operator-no-set]
user@host# set permissions [ clear network
reset view ]
user@host# set deny-commands "set"
The following example allows software installation but denies access to the show nic command for the login class operator-no-set that has operator privileges defined by the clear, network, reset, and view permissions.
[edit system login class operator-and-install-no-nic]
user@host# set permissions [ clear network
reset view ]
user@host# set allow-commands "request system
install"
user@host# set deny-commands "show nic"