User Groups; Predefined User Groups; Task Ids - Cisco CRS-1 - Carrier Routing System Router Getting Started Manual

User Access Privileges

User Groups

The access privileges of a user are defined by the user groups to which he or she belongs. Each user group
defines a collection of access rights for all members of that group. You can be assigned to more than one
group to gain additional access privileges.
Users are not assigned to groups by default, and must be explicitly assigned by an administrator.

Predefined User Groups

The Cisco IOS XR software includes a set of predefined user groups that meet the needs of most
organizations. The predefined user groups are described in
Table 2-2
User Group
root-system
root-lr
sysadmin
netadmin
operator
cisco-support
Although the predefined user groups are sufficient for the needs of most organizations, administrators
can configure their own groups. See the
page
Although the Cisco CRS-1 router is designed to operate as a multiple-chassis system that allows for the
Note
configuration of multiple LRs and all their interfaces and resources, Cisco IOS XR software Releases 2
and 3 support one chassis and one LR. In a single-chassis system, only one LR is necessary or operable.

Task IDs

Administrators create and modify user groups by assigning a set of task IDs to the user group name. Task
IDs are names of functions or components in the Cisco IOS XR software, such as "logging" or "basic
services." Each of these task IDs can be assigned to a user group, along with the specific rights for that
task ID, such as "read," "write," or "execute."
Cisco CRS-1 Series Carrier Routing System Getting Started Guide
2-6
Predefined User Group Descriptions
2-8.
Chapter 2
Privileges
Ability to display and execute all commands for all logical routers
(LRs) in the system.
Ability to display and execute all commands within a single LR.
Perform system administration tasks for the router, such as
maintaining where the core dumps are stored or setting up the Network
Time Protocol (NTP) clock.
Configure network protocols, such as Border Gateway Protocol (BGP)
and Open Shortest Path First (OSPF) (usually network
administrators).
Perform day-to-day monitoring activities, and have limited
configuration rights.
Ability to debug and troubleshoot features (usually Cisco support
personnel).
"Related Documents for AAA Configuration" section on
Cisco IOS XR Basic Configuration Management
Table 2-2.