Configuring System Administrative Users - Cisco ASR 5000 Series Administration Manual

Configuring System Administrative Users

• You can turn off confirmation prompting for a specific category using no commandguard exec-command
• If autoconfirm is overridden by commandguard exec-command for an Exec mode command, StarOS
• Users may selectively override confirmation prompting for any Exec mode configuration command that
For example, with commandguard exec-command card enabled, the confirmation prompt appears as shown
below:
[local]
Info: commandguard prevents autoconfirm of this command
Are you sure? [Yes|No]:
[local]
Configuring System Administrative Users
Getting Started describes how to configure a context-level security administrator for the system.
This section provides instructions for configuring additional administrative users having the following
privileges:
• Security Administrators: have read-write privileges and can execute all CLI commands, including
• Administrators: have read-write privileges and can execute any command in the CLI except for a few
• Operators: have read-only privileges to a larger subset of the Exec Mode commands. They can execute
• Inspectors: are limited to a few read-only Exec Mode commands. The bulk of these are show commands
Configuration instructions are categorized according to the type of administrative user: context-level or
local-user.
Important
User Name Character Restrictions
User names can only contain alphanumeric characters (a-z, A-Z, 0-9), hyphen, underscore, and period. The
hyphen character cannot be the first character. This applies to AAA user names as well as local user names.
ASR 5500 System Administration Guide, StarOS Release 21.4
50
exec_mode_category.
displays an informational message indicating why autoconfirm is being overridden when you attempt
to execute the command.
supports the -noconfirm keyword.
host_name
card busy-out 1
#
yes
host_name
#
those available to Administrators, Operators, and Inspectors
security-related commands that can only be configured by Security Administrators. Administrators can
configure or modify system settings and execute all system commands, including those available to the
Operators and Inspectors.
all commands that are part of the inspector mode, plus some system monitoring, statistic, and fault
management functions. Operators do not have the ability to enter the Config Mode.
for viewing a variety of statistics and conditions. An Inspector cannot execute show configuration
commands and does not have the privilege to enter the Config Mode.
For information on the differences between these user privileges and types, refer to Getting Started.
System Settings