Dell S4048–ON Configuration Manual page 742

Configuring Custom Privilege Levels
In addition to assigning privilege levels to the user, you can configure the privilege levels of commands so that they are visible in
different privilege levels.
Within Dell Networking OS, commands have certain privilege levels. With the privilege command, you can change the default
level or you can reset their privilege level back to the default.
• Assign the launch keyword (for example, configure) for the keyword's command mode.
• If you assign only the first keyword to the privilege level, all commands beginning with that keyword are also assigned to the
privilege level. If you enter the entire command, the software assigns the privilege level to that command only.
To assign commands and passwords to a custom privilege level, use the following commands. You must be in privilege level 15.
1. Assign a user name and password.
CONFIGURATION mode
username name [access-class access-list-name] [privilege level] [nopassword | password
[encryption-type] password Secret]
Configure the optional and required parameters:
• name: Enter a text string up to 63 characters(maximum) long.
• access-class access-list-name: Restrict access by access-class..
• privilege level: The range is from 0 to 15.
• nopassword: No password is required for the user to log in.
• encryption-type: Enter 0 for plain text or 7 for encrypted text.
• password: Enter a string. Specify the password for the user.
• Secret: Specify the secret for the user.
2. Configure a password for privilege level.
CONFIGURATION mode
enable password [level level] [encryption-mode] password
Configure the optional and required parameters:
• level level: specify a level from 0 to 15. Level 15 includes all levels.
• encryption-type: enter 0 for plain text or 7 for encrypted text.
• password: enter a string up to 32 characters long.
To change only the password for the enable command, configure only the password parameter.
3. Configure level and commands for a mode or reset a command's level.
CONFIGURATION mode
privilege mode {level level command | reset command}
Configure the following required and optional parameters:
• mode: enter a keyword for the modes (exec, configure, interface, line, route-map, or router)
• level level: the range is from 0 to 15. Levels 0, 1, and 15 are pre-configured. Levels 2 to 14 are available for custom
configuration.
• command: an Dell Networking OS CLI keyword (up to five keywords allowed).
• reset: return the command to its default privilege mode.
Examples of Privilege Level Commands
To view the configuration, use the show running-config command in EXEC Privilege mode.
The following example shows a configuration to allow a user john to view only EXEC mode commands and all snmp-server
commands. Because the snmp-server commands are enable level commands and, by default, found in CONFIGURATION mode,
742
Security