Command Authorization - HP Enterprise FlexFabric 12900E Series Command Reference Manual

After you configure the
configure the
Examples
# Enable command accounting for VTY line 0.
<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command accounting
Related commands
accounting command

command authorization

command authorization
Use
command authorization
Use
undo command authorization
Syntax
command authorization
undo command authorization
Default
Command authorization is disabled. Logged-in users can execute commands without authorization.
Views
User line view
User line class view
Predefined user roles
network-admin
Usage guidelines
When command authorization is enabled, commands available for a user vary by the user's login
authentication mode.
•
If authentication is disabled or password authentication is enabled, command authorization
does not take effect, and the user cannot use any commands.
•
If scheme authentication is enabled, commands available for a user vary by the user's access
authentication method.
If local authentication is used, the device uses the user roles assigned to the user to perform

command authorization.
If remote authentication is used, the remote authorization server performs command

authorization to determine whether a command entered by a login user is permitted. If
remote authorization fails, the device uses the user roles of a local user with the same name
as the login user to determine whether the command can be used. If the authorization also
fails, the login user cannot use the command.
Command authorization configuration changes in user line class view do not take effect on the
current session. The changes take effect only on subsequent login sessions. Command
authorization configuration changes in user line view take effect immediately on all users that access
the user line.
command accounting
undo command accounting
(User Access and Authentication Command Reference)
command in user line class view, you cannot
command in any user line views in the class.
to enable command authorization.
to disable command authorization.
50