Table of Contents
Advertisement
Guidelines
The access-policy command assigns one or more access policy statements to the
user group. If there are more than one statement, the statements are cumulative. If
more than one statement applies to the same resource, the most specific statement
will apply. For example, given the following two statements any member of this
user group can read all objects but has complete access privileges to Multi-Protocol
Gateway services:
*/*/*?Access=r
*/*/services/multiprotocol-gateway?Access=r+w+a+d+x
It is not possible to remove a specific access policy from the command line. If you
invoke the no access-policy command, all access policies are removed. To remove
a specific access policy from a user group, use the WebGUI.
Examples
v Adds full access privileges to all resources and read only access for login and
add
Adds a command suite.
Syntax
add name
Parameters
name
Guidelines
To display a list of available command groups, use the add command, with no
arguments, at the CLI prompt.
Edit of an existing User Group with either the add or delete commands does not
effect the access privileges of current user accounts assigned to the User Group.
The updated access privileges defined by the edited User Group are assigned to
user accounts subsequently added to the User Group.
To assign an edited User Group to user account, you must first delete the account
with the no username command and then recreate the account with the username
command.
728
Command Reference
d
Delete existing object
x
Execute
network resources to members of the appdev User Group.
# usergroup appdev
User group configuration mode
# access-policy "*/*/*?Access=r+w+a+d"
# access-policy "*/*/login/*?Access=r"
# access-policy "*/*/network/*?Access=r"
# exit
Usergroup update successful
#
Specifies the name of the command group.
Advertisement
Table of Contents
