Examples: Defining Access Privileges for SRC Configuration Mode Commands
The following example does not allow access to any login class whose name begins with “ m” for the login class local that has permission set to all:
[edit system login class local]
user@host# set permissions all
user@host# set deny-configuration "system
login class m.*"
The following example does not allow access to configuration mode commands at the [system login class] or [system services hierarchy] levels for the login class config-admin that has permission set to all:
[edit system login class config-admin]
user@host# set permissions all
user@host# set deny-configuration "(system
login class) | (system services)"