Creating And Modifying User Accounts And User Groups; Displaying Details About User Accounts, User Groups, And Task Ids - Cisco Router IOS XR Getting Started Manual

Chapter 5 Configuring Additional Router Features

Creating and Modifying User Accounts and User Groups

In the Cisco IOS XR software, users are assigned individual usernames and passwords. Each username
is assigned to one or more user groups, each of which defines display and configuration commands the
user is authorized to execute. This authorization is enabled by default in the Cisco IOS XR software, and
each user must log in to the system using a unique username and password.
The following sections describe the basic commands used to configure users and user groups. For a
summary of user accounts, user groups, and task IDs, see the
page
•
•
The management of user accounts, user groups, and task IDs is part of the "AAA" feature in the
Note
Cisco IOS XR software. AAA stands for "authentication, authorization, and accounting," a suite of
security features included in the Cisco IOS XR software. For more information on the AAA concepts
and configuration tasks, see Cisco IOS XR System Security Configuration Guide and Cisco IOS XR
System Security Command Reference. For instructions to activate software packages, see Cisco IOS XR
System Management Configuration Guide, Release 3.4.

Displaying Details About User Accounts, User Groups, and Task IDs

Table 5-3
groups, and task IDs.
Table 5-3 Commands to Display Details About Users and User Groups
Command
show aaa userdb username
show aaa usergroup usergroup-name
show task supported
OL-10957-02
4-13.
Displaying Details About User Accounts, User Groups, and Task IDs, page 5-13
Configuring User Accounts, page 5-14
summarizes the EXEC mode commands used to display details about user accounts, user
Description
Displays the task IDs and privileges assigned to a specific username. To display
all users on the system, enter the command without a username.
Displays the task IDs and privileges that belong to a user group. To display all
groups on the system, enter the command without a group name.
Displays all task IDs for the system. Only the root-system users, root-lr users, or
users associated with the WRITE:AAA task ID can configure task groups.

Creating and Modifying User Accounts and User Groups

"User Access Privileges" section on
Cisco IOS XR Getting Started Guide
5-13