Create Command Rules - Cisco NCS 1002 System Setup And Software Installation Manual

Create Command Rules

Note
Step 4
users user_name
Example:
sysadmin-vm:0_RP0#(config-group-gr1)#users us1
Specify the name of the user that should be part of the user group.
You can specify multiple user names enclosed withing double quotes. For example, users "user1 user2 ...".
Step 5 gid group_id_value
Example:
sysadmin-vm:0_RP0#(config-group-gr1)#gid 50
Specify a numeric value. You can enter any 32 bit integer.
Step 6
Use the commit or end command.
commit-Saves the configuration changes and remains within the configuration session.
end-Prompts user to take one of these actions:
• Yes-Saves configuration changes and exits the configuration session.
• No-Exits the configuration session without committing the configuration changes.
• Cancel-Remains in the configuration session, without committing the configuration changes.
What to do next
• Create command rules. See
• Create data rules. See
Create Command Rules
Command rules are rules based on which users of a user group are either permitted or denied the use of certain
commands. Command rules are associated to a user group and get applied to all users who are part of the user
group.
A command rule is created by specifying whether an operation is permitted, or denied, on a command. This
table lists possible operation and permission combinations:
Operation
Read (R)
Execute (X)
System Setup and Software Installation Guide for Cisco NCS 1002
40
By default, the user group "root-system" is created by the system at the time of root user creation.
The root user is part of this user group. Users added to this group get root user permissions.
Create Command Rules, on page
Create Data Rules, on page
Accept Permission
Command is displayed on the CLI when
"?" is used.
Command can be executed from the CLI.
Create User Profiles and Assign Privileges
40.
43.
Reject Permission
Command is not displayed on the CLI when
"?" is used.
Command cannot be executed from the CLI.