Predefined User Groups - Cisco ASR 9000 Getting Started Manual

User Access Privileges
The task group is also a logical container, but it is used to group tasks. Instead of assigning task IDs to
each user group, you assign them to a task group. This allows you to quickly enable access to a specific
set of tasks by assigning a task group to a user group.
To summarize the associations, usernames are assigned to user groups, which are then assigned to task
groups. Users can be assigned to multiple user groups, and each user group can be assigned to one or
more task groups. The commands that a user can execute are all those commands assigned to the tasks
within the task groups that are associated with the user groups to which the user belongs.
Users are not assigned to groups by default and must be explicitly assigned by an administrator.
Only the root-system users, root-lr users, or users associated with the WRITE:AAA task ID can
Note
configure task groups.

Predefined User Groups

Cisco IOS XR software includes a set of predefined user groups that meets the needs of most
organizations.
Table 3
User Group
root-system
root-lr
sysadmin
serviceadmin
netadmin
operator
cisco-support
1. NTP stands for Network Time Protocol
2. BGP stands for Border Gateway Protocol
3. Open Shortest Path First
Cisco ASR 9000 Series Aggregation Services Router Getting Started Guide
44
Table 3 describes predefined user groups.
Predefined User Group Descriptions
Privileges
Display and execute all commands for all in the system.
Display and execute all commands within a single .
Perform system administration tasks for the router, such as
maintaining where the core dumps are stored or setting up the NTP
clock.
Perform service administration tasks for the router, such as
configuring firewall.
Configure network protocols, such as BGP
by network administrators).
Perform day-to-day monitoring activities, and have limited
configuration rights.
Debug and troubleshoot features (usually, used by Cisco Technical
Support personnel).
Chapter Configuring General Router Features
2 3
and OSPF (usually used
1
OL-28417-02