Examples
# Enable command accounting for user line VTY 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command accounting
Related commands
command authorization
•
accounting command (Security Command Reference)
•
command authorization
Use command authorization to enable command authorization.
Use undo command authorization to restore the default.
Syntax
command authorization
undo command authorization
Default
Command authorization is disabled. Logged-in users can execute commands without authorization.
Views
User line view, user line class view
Predefined user roles
network-admin
Usage guidelines
When command authorization is enabled, a command is available only if the following conditions are
met:
•
The user has the commensurate user role.
The user is authorized to use the command by the AAA scheme.
•
If the command authorization command is configured in user line class view:
Command authorization is enabled on all user lines in the class.
•
You cannot configure the undo command authorization command in the view of a user line in the
•
class.
Examples
# Enable command accounting for VTY 0 so the VTY 0 user can execute only authorized commands that
are permitted by the user role.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command authorization
Related commands
command accounting
•
authorization command (Security Command Reference)
•
44