Cisco ASR 5000 Series Administration Guide

•
You can turn off confirmation prompting for a specific category using no commandguard exec-command
exec_mode_category.
•
If autoconfirm is overridden by commandguard exec-command for an Exec mode command, StarOS
displays an informational message indicating why autoconfirm is being overridden when you attempt
to execute the command.
•
Users may selectively override confirmation prompting for any Exec mode configuration command that
supports the -noconfirm keyword.
For example, with commandguard exec-command card enabled, the confirmation prompt appears as shown
below:
[local]host_name# card busy-out 1
Info: commandguard prevents autoconfirm of this command
Are you sure? [Yes|No]: yes
[local]host_name#
Configuring System Administrative Users
Getting Started describes how to configure a context-level security administrator for the system.
This section provides instructions for configuring additional administrative users having the following
privileges:
•
Security Administrators: have read-write privileges and can execute all CLI commands, including
those available to Administrators, Operators, and Inspectors
•
Administrators: have read-write privileges and can execute any command in the CLI except for a few
security-related commands that can only be configured by Security Administrators. Administrators can
configure or modify system settings and execute all system commands, including those available to the
Operators and Inspectors.
•
Operators: have read-only privileges to a larger subset of the Exec Mode commands. They can execute
all commands that are part of the inspector mode, plus some system monitoring, statistic, and fault
management functions. Operators do not have the ability to enter the Config Mode.
•
Inspectors: are limited to a few read-only Exec Mode commands. The bulk of these are show commands
for viewing a variety of statistics and conditions. An Inspector cannot execute show configuration
commands and does not have the privilege to enter the Config Mode.
Configuration instructions are categorized according to the type of administrative user: context-level or
local-user.
For information on the differences between these user privileges and types, refer to Getting Started.
Important
User Name Character Restrictions
User names can only contain alphanumeric characters (a-z, A-Z, 0-9), hyphen, underscore, and period. The
hyphen character cannot be the first character. This applies to AAA user names as well as local user names.
ASR 5500 System Administration Guide, StarOS Release 21.4
50
System Settings
Configuring System Administrative Users

Cisco ASR 5000 Series Specifications

General

Brand	Cisco
Model	ASR 5000 Series
Category	Network Router
Language	English