44
Cisco ASR 9000 Series Aggregation Services Router Getting Started Guide
OL-28417-02
Chapter Configuring General Router Features
User Access Privileges
The task group is also a logical container, but it is used to group tasks. Instead of assigning task IDs to
each user group, you assign them to a task group. This allows you to quickly enable access to a specific
set of tasks by assigning a task group to a user group.
To summarize the associations, usernames are assigned to user groups, which are then assigned to task
groups. Users can be assigned to multiple user groups, and each user group can be assigned to one or
more task groups. The commands that a user can execute are all those commands assigned to the tasks
within the task groups that are associated with the user groups to which the user belongs.
Users are not assigned to groups by default and must be explicitly assigned by an administrator.
Note Only the root-system users, root-lr users, or users associated with the WRITE:AAA task ID can
configure task groups.
Predefined User Groups
Cisco IOS XR software includes a set of predefined user groups that meets the needs of most
organizations.
Table 3 describes predefined user groups.
Ta b l e 3 Predefined User Group Descriptions
User Group Privileges
root-system Display and execute all commands for all in the system.
root-lr Display and execute all commands within a single .
sysadmin Perform system administration tasks for the router, such as
maintaining where the core dumps are stored or setting up the NTP
1
clock.
1. NTP stands for Network Time Protocol
serviceadmin Perform service administration tasks for the router, such as
configuring firewall.
netadmin Configure network protocols, such as BGP
2
and OSPF
3
(usually used
by network administrators).
2. BGP stands for Border Gateway Protocol
3. Open Shortest Path First
operator Perform day-to-day monitoring activities, and have limited
configuration rights.
cisco-support Debug and troubleshoot features (usually, used by Cisco Technical
Support personnel).
To Next Page
Loading...
Need help?
General
