Cisco NCS 1002 System Setup And Software Installation Manual page 48

Create Data Rules
Specify the keypath of the data element. The keypath is an expression defining the location of the data element.
If you enter an asterisk '*' for keypath , it indicates that the command rule is applicable to all configuration
data.
Step 5 ops operation
Example:
sysadmin-vm:0_RP0#(config-datarule-1100)#ops rw
Specify the operation for which permission has to be specified. Various operations are identified by these
letters:
• c—Create
• d—Delete
• u—Update
• w— Write (a combination of create, update, and delete)
• r—Read
• x—Execute
Step 6
action {accept | accept_log | reject}
Example:
sysadmin-vm:0_RP0#(config-datarule-1100)#action reject
Specify whether users are permitted or denied the operation.
• accept — users are permitted to perform the operation
• accept_log— users are permitted to perform the operation and every access attempt is logged
• reject— users are restricted from performing the operation
Step 7
group user_group_name
Example:
sysadmin-vm:0_RP0#(config-datarule-1100)#group gr1
Specify the user group on which the data rule is applied. Multiple group names can also be specified.
Step 8 context connection type
Example:
sysadmin-vm:0_RP0#(config-datarule-1100)#context *
Specify the type of connection to which this rule applies. The connection type can be netconf (Network
Configuration Protocol), cli (Command Line Interface), or xml (Extensible Markup Language ). It is
recommended that you enter an asterisk '*', which indicates that the command applies to all connection types.
Step 9
namespace namespace
Example:
sysadmin-vm:0_RP0#(config-datarule-1100)#namespace *
Enter asterisk '*' to indicate that the data rule is applicable for all namespace values.
System Setup and Software Installation Guide for Cisco NCS 1002
44
Create User Profiles and Assign Privileges