Root-System Users - Cisco ASR 9000 Series User Configuration Manual

Secure Domain Routers on the Cisco ASR 9000 Series Router
• Only users with root-system privileges can access the administration EXEC and administration
configuration modes.
• Users with other access privileges can access features according to their assigned privileges for a specific
SDR.
For more information about AAA policies, see the Configuring AAA Services on the Cisco ASR 9000 Series
Router module of Cisco ASR 9000 Series Aggregation Services Router System Security Configuration Guide.
Related Topics
Root-System Users, on page 15
root-lr Users, on page 15
Other SDR Users, on page 16

Root-System Users

Users with root-system privileges have access to system-wide features and resources. The root-system user
is created during the initial boot and configuration of the router.
The root-system user has the following privileges:
• Access to administration EXEC and administration configuration commands.
• Ability to create other users with similar or lower privileges.
• Complete authority over the chassis.
• Ability to install and activate software packages for the router.
• Ability to view the following administration (admin) plane events (owner SDR logging system only):
root-lr Users
Users with root-lr privileges can log in to an SDR only and perform configuration tasks that are specific to
that SDR. The root-lr group has the following privileges:
• Ability to configure interfaces and protocols.
• Ability to create other users with similar or lower privileges on the SDR.
• Ability to view the resources assigned to their particular SDR.
The following restrictions apply to root-lr users:
◦ Software installation operations and events.
◦ System card boot operations, such as card booting notifications and errors, heartbeat-missed
notifications, and card reloads.
◦ Card alphanumeric display changes.
◦ Environment monitoring events and alarms.
◦ Fabric control events.
◦ Upgrade progress information.
Cisco ASR 9000 Series Aggregation Services Router System Management Configuration Guide, Release 5.1.x
SDR Access Privileges
15