Examples: Defining Access Privileges for SRC Configuration Mode Commands

The following example does not allow access the C Series Controller through a Telnet session for the login class remote that has permission set to all:

[edit system login class remote]user@host# set permissions all user@host# set deny-configuration "system services telnet"

The following example does not allow access to any login class whose name begins with “ m” for the login class local that has permission set to all:

[edit system login class local]user@host# set permissions all user@host# set deny-configuration "system login class m.*"

The following example does not allow access to configuration mode commands at the [system login class] or [system services hierarchy] levels for the login class config-admin that has permission set to all:

[edit system login class config-admin]user@host# set permissions all user@host# set deny-configuration "(system login class) | (system services)"

Related Documentation