5-15
Cisco CRS-1 Series Carrier Routing System Getting Started Guide
Chapter 5 Initial Configuration of the Cisco IOS XR Software
Creating and Modifying User Accounts and User Groups
The following sections describe the basic commands used to configure users and user groups. For a
summary of user accounts, user groups, and task IDs, see the “User Access Privileges” section on
page 2-5.
• Displaying Details About User Accounts, User Groups, and Task IDs, page 5-15
• Configuring User Accounts, page 5-15
• Predefined User Groups, page 5-16
Note The management of user accounts, user groups, and task IDs is part of the “AAA” feature in the
Cisco IOS XR software. AAA stands for “authentication, authorization, and accounting,” a suite of
security features included in the Security package of the Cisco IOS XR software. For more information
on the AAA concepts and configuration tasks, refer to Configuring AAA Services on Cisco IOS XR
Software and Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software. For
instructions to activate software packages, see Chapter 6, “Managing Cisco IOS XR Software
Packages.”
Displaying Details About User Accounts, User Groups, and Task IDs
Table 5-5 summarizes the EXEC mode commands used to display details about user accounts, user
groups, and task IDs.
Table 5-5 Commands to Display Details About Users and User Groups
Configuring User Accounts
User accounts, user groups, and task groups are created by entering the appropriate commands in one of
the “AAA” configuration submodes, as shown in Figure 5-2.
This section describes the process to configure usernames. For instructions to configure user groups, task
groups, and other AAA security features, refer to Configuring AAA Services on Cisco IOS XR Software
in Cisco IOS XR System Security Configuration.
Command Description
show aaa userdb username Displays the task IDs and privileges assigned to a specific username. To display
all users on the system, enter the command without a username.
show aaa usergroup usergroup-name Displays the task IDs and privileges that belong to a user group. To display all
groups on the system, enter the command without a group name.
show task supported Displays all task IDs for the system. Only the root-system users or root-lr users
or users associated with the WRITE:AAA task ID can configure task groups.