User role name
network-operator
mdc-admin
mdc-operator
level-n (n = 0 to 15)
Permissions
•
Accesses the display commands for features and resources in the
system. To display all accessible commands of the user role, use the
display role command.
•
Changes between MDC views.
•
Enables local authentication login users to change their own
passwords.
•
Accesses the command used for entering XML view.
•
Accesses all read-type XML elements.
•
Accesses all read-type MIB nodes.
Accesses all features and resources in the administered MDC, except for
the display security-logfile summary, info-center security-logfile directory,
and security-logfile save commands.
•
Accesses the display commands for features and resources available in
the administered MDC. To display all accessible commands of the user
role, use the display role command.
•
Enables local authentication login users to change their own
passwords.
•
Accesses the command used for entering XML view.
•
Accesses all read-type XML elements.
•
Accesses all read-type MIB nodes.
•
level-0—Has access to diagnostic commands, including ping, tracert,
ssh2, telnet, and super. Level-0 access rights are configurable.
•
level-1—Has access to the display commands of all features and
resources in the system except display history-command all. The level-1
user role also has all access rights of the level-0 user role. Level- 1 access
rights are configurable.
•
level-2 to level-8, and level-10 to level-14—Have no access rights by
default. Access rights are configurable.
•
level-9—Has access to all features and resources except those in the
following list. If you are logged in with a local user account that has a
level-9 user role, you can change the password in the local user
account. Level-9 access rights are configurable.
RBAC non-debugging commands.
Local users.
MDCs.
File management.
Device management.
The display history-command all command.
•
level-15—Has the same rights as network-admin on the default MDC,
and has the same rights as mdc-admin on non-default MDCs.
17