Managing User Login Accounts; Partition Management Requirements - Alcatel Omni Switch/Router User Manual

Managing User Login Accounts

Prior to software release 4.4, the switch provided security in the form of privilege control for
individual login accounts by allocating each user accounts
ware release 4.4 contains a partition management feature that enhances the privilege capabil-
ity with an authorization scheme based on the functional capacity assigned to each user.
The purpose of partition management is to provide a mechanism in the switch operating
system for system administrators to control access while maintaining enough flexibility to use
the switch's full range of services. This is normally done for security reasons. System adminis-
trators can partition access to the switch by restricting a user's ability to perform certain switch
commands or to use certain command groups.
A user account refers to the user's ability to log onto
the switch and perform certain functions. From the
user's perspective, it consists of the login name and a
password.
A privilege refers to the user's ability or permission from
the system administrator to execute a command.

Partition Management Requirements

Partition management is available only for user login accounts that have no permission to use
the command mode. Where a user account has permission to use the
UI
management is effectively destroyed for that user account. To maintain partition management
capability for a user account, that account must be restricted to using the
Refer to ''Assigning Account Privileges Using the UI Command Mode'' on page 8-16 or
''Assigning Account Privileges Using the CLI Command Mode'' on page 8-13 for information
on restricting use
UI
Not all
CLI
detailed information, refer to the
ence Tables in Chapter 4 of this manual.
o Terminology Noteso
commands.
o Noteo
commands have
UI
commands support partition management. For
or
READ WRITE
equivalents. Also, not all
CLI
to Cross Refer-
UI CLI
Managing User Login Accounts
privileges. Soft-
mode, partition
UI
mode only.
CLI
Page 8-11