User Access Levels - Lenovo RackSwitch G8264 Command Reference Manual

User Access Levels

30
G8264 Command Reference for ENOS 8.4
To enable better switch management and user accountability, three levels or classes
of user access have been implemented on the G8264. Levels of access to CLI, Web
management functions, and screens increase as needed to perform various switch
management tasks. Conceptually, access classes are defined as follows:
 user
Interaction with the switch is completely passive—nothing can be changed on
the G8264. Users may display information that has no security or privacy
implications, such as switch statistics and current operational state information.
oper

Operators can make temporary changes on the G8264. These changes are lost
when the switch is rebooted. Operators have access to the switch management
features used for daily switch operations. Because any changes an operator
makes are undone by a reboot of the switch, operators cannot severely impact
switch operation.
 admin
Administrators are the only ones that may make permanent changes to the
switch configuration—changes that are persistent across a reboot of the switch.
Administrators can access switch functions to configure and troubleshoot
problems on the G8264. Because administrators can also make temporary
(operator‐level) changes as well, they must be aware of the interactions between
temporary and permanent changes.
Access to switch functions is controlled through the use of unique surnames and
passwords. Once you are connected to the switch via local Telnet, remote Telnet, or
SSH, you are prompted to enter a password. The default user names/password for
each access level are listed in the following table.
Note: It is recommended that you change default switch passwords after initial
configuration and as regularly as required under your network security policies.
Table 4.
User Access Levels
User Account Description and Tasks Performed
User The User has no direct responsibility for switch
management. He or she can view all switch status
information and statistics, but cannot make any
configuration changes to the switch.
Operator The Operator can make temporary changes that
are lost when the switch is rebooted. Operators
have access to the switch management features
used for daily switch operations.
The superuser Administrator has complete access
to all command modes, information, and
Administrator
configuration commands on the RackSwitch
G8264, including the ability to change both the
user and administrator passwords.
Note: With the exception of the "admin" user, access to each user level can be
disabled by setting the password to an empty value.
Password
admin