show cli authorization
Syntax
show cli authorization
Description
Display the permissions for the current user.
Options
This command has no options.
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show cli authorization command. In the table, all possible permissions are displayed and
output fields are listed in alphabetical order.
Field Name |
Field Description |
|---|---|
|
Can view access configuration information. |
|
Can modify access configuration. |
|
Can view user account information. |
|
Can modify user account information. |
|
Can clear learned network information. |
|
Can enter configuration mode. |
|
Can modify any configuration. |
|
Can edit configuration files. |
|
Reserved for field (debugging) support. |
|
Can view firewall configuration information. |
|
Can modify firewall configuration information. |
|
Can read from and write to removable media. |
|
Can view flow-tap configuration information. |
|
Can configure flow-tap configuration information. |
|
Can configure Profiler data. |
|
Can view interface configuration information. |
|
Can modify interface configuration information. |
|
Can perform system maintenance. |
|
Can access the network by entering
the |
|
Can view Packet Gateway Control Protocol session mirroring configuration. |
|
Can modify Packet Gateway Control Protocol session mirroring configuration all-control. |
|
Can reset or restart interfaces and system processes. |
|
Can roll back to previous configurations. |
|
Can view routing configuration information. |
|
Can modify routing configuration information. |
|
Can view passwords and authentication keys in the configuration. |
|
Can modify passwords and authentication keys in the configuration. |
|
Can view security configuration information. |
|
Can modify security configuration information. |
|
Can start a local shell. |
|
Can view SNMP configuration information. |
|
Can modify SNMP configuration information. |
|
Can view system configuration information. |
|
Can modify system configuration information. |
|
Can view trace file settings information. |
|
Can modify trace file settings information. |
|
Can view current values and statistics. |
|
Can view all configuration information (not including secrets). |
Sample Output
show cli authorization
user@host> show cli authorization
Current user: 'remote' login: 'user' class ''
Permissions:
admin -- Can view user accounts
admin-control-- Can modify user accounts
clear -- Can clear learned network information
configure -- Can enter configuration mode
control -- Can modify any configuration
edit -- Can edit full files
field -- Special for field (debug) support
floppy -- Can read and write from the floppy
interface -- Can view interface configuration
interface-control-- Can modify interface configuration
network -- Can access the network
reset -- Can reset/restart interfaces and daemons
routing -- Can view routing configuration
routing-control-- Can modify routing configuration
shell -- Can start a local shell
snmp -- Can view SNMP configuration
snmp-control-- Can modify SNMP configuration
system -- Can view system configuration
system-control-- Can modify system configuration
trace -- Can view trace file settings
trace-control-- Can modify trace file settings
view -- Can view current values and statistics
maintenance -- Can become the super-user
firewall -- Can view firewall configuration
firewall-control-- Can modify firewall configuration
secret -- Can view secret configuration
secret-control-- Can modify secret configuration
rollback -- Can rollback to previous configurations
security -- Can view security configuration
security-control-- Can modify security configuration
access -- Can view access configuration
access-control-- Can modify access configuration
view-configuration-- Can view all configuration (not including secrets)
flow-tap -- Can view flow-tap configuration
flow-tap-control-- Can configure flow-tap service
Individual command authorization:
Allow regular expression: none
Deny regular expression: none
Allow configuration regular expression: none
Deny configuration regular expression: noneRelease Information
Command introduced before Junos OS Release 7.4.