Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X User Manual

Setting Privilege Levels for a Group of Commands
You can set the privilege level for a group of commands by using the beginning
keyword in a command.
For example, if you issue the privilege configure all level 5 snmp command, all
commands in Global Configuration mode that begin with snmp become accessible
to users who have CLI privileges at level 5 and higher.
Using the Order of Precedence
The effectiveness of a privilege level that is set with the all keyword depends on its
precedence level in the CLI. A privilege level is considered to be in effect only if a
privilege level that is configured at a higher precedence level does not override it.
The CLI uses the following order of precedence:
1. Privilege level set for all commands within a mode, including modes that are
accessed from another mode; for example, Global Configuration mode
2. Privilege level set for all commands that begin with the same keyword; for
example, snmp commands
3. Privilege level set for individual commands; for example, snmp-server
community
NOTE: This order of precedence does not apply to privilege levels that are set without
the all keyword.
In the following example, the privilege level of the snmp-server community command
is set to level 11, the privilege level for all commands that begin with snmp is set to
level 10, and the privilege level for all commands in Global Configuration mode is
set to level 5.
host1(config)#privilege configure level 11 snmp-server community
host1(config)#privilege configure all level 10 snmp
host1(config)#privilege exec all level 5 configure
The following show configuration output displays the privilege levels set above. The
privilege levels for the snmp-server community command and the snmp-server
group of commands are still present in the output. However, the privilege level of
Global Configuration mode takes precedence, and the privilege levels of the other
commands are rendered ineffective. Users can access all snmp commands at level
5 or higher.
host1#show config category management cli command-privileges
privilege configure level 11 snmp-server community
privilege configure all level 10 snmp-server
privilege exec all level 5 configure
60 ■ CLI Command Privileges
JUNOSe 11.1.x System Basics Configuration Guide

Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Specifications

General

Brand	Juniper
Model	SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X
Category	Software
Language	English