HP 4800G Series Configuration Manual page 1696

Users can switch from a high user privilege level to a low user privilege level without entering a
password; when switching from a low user privilege level to a high user privilege level, only the console
login users do not have to enter the password, and users that log in from VTY user interfaces need to
enter the password for security's sake. This password is for level switching only and is different from the
login password. If the entered password is incorrect or no password is configured, the switching fails.
Therefore, before switching a user to a higher user privilege level, you should configure the password
needed.
Follow these steps to switch user privilege level:
To do...
Enter system view
Configure the password for
switching the user privilege
level
Exit to user view
Switch the user privilege
level
When you configure the password for switching user privilege level with the super password
command, the user privilege level is 3 if no user privilege level is specified.
The password for switching user privilege level can be displayed in both cipher text and simple text.
You are recommended to adopt the former as the latter is easily cracked.
Modifying command level
All the commands in a view are defaulted to different levels, as shown in
can modify the command level based on users' needs to make users of a lower level use commands
with a higher level or improve device security.
Follow these steps to modify the command level:
To do...
Enter system view
Configure the command level in
a specified view
Use the command...
system-view
super password [ level
user-level ] { simple | cipher }
password
quit
super [ level ]
Use the command...
system-view
command-privilege level
level view view command
1-13
Remarks
—
Required
By default, no password is
configured.
—
Required
When logging in to the device, a
user has a user privilege level,
which is decided by user interface
or authentication user level.
Table 1-3. The administrator
Remarks
—
Required
Refer to Table 1-3 for the
default settings.