Security
124
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
3.10.2.1.7 Profile Management Commands
profile
Syntax [no] profile user-profile-name
Context config>system>security
Description This command creates a context to create user profiles for CLI command tree permissions.
Profiles are used to either deny or permit user console access to a hierarchical branch or to
specific commands.
Once the profiles are created, the user command assigns users to one or more profiles. You
can define up to 16 user profiles, but a maximum of 8 profiles can be assigned to a user.
The no form of the command deletes a user profile.
Default user-profile default
Parameters user-profile-name — the user profile name entered as a character string. The string is
case-sensitive and limited to 32 ASCII 7-bit printable characters with no spaces.
default-action
Syntax default-action {deny-all | permit-all | none}
Context config>system>security>profile
Description This command specifies the default action to be applied when no match conditions are met.
Default none
Parameters deny-all — sets the default of the profile to deny access to all commands
permit-all — sets the default of the profile to permit access to all commands
none — sets the default of the profile to no-action. This option is useful to assign multiple
profiles to a user.
Note: The permit-all command does not change access to security commands. Security
commands are only and always available to members of the admin-user profile.