user privilege
Function
The user privilege command configures the user level.
The undo user privilege command restores the default user level.
By default, users who log in to the device using the console interface are at level 15 and other users are at level 0.
Parameters
| Parameter | Description | Value |
|---|---|---|
| level level | Specifies the user level. | The value is an integer ranging from 0 to 15. |
Usage Guidelines
Usage Scenario
The system manages users at levels to control their access permissions. Users who log in to the device can use only commands at the same or lower level than their own levels.
Commands are classified into the visit level, monitoring level, configuration level, and management level that map levels 0, 1, 2, and 3, as listed in Table 2-10.
User Level |
Command Level |
Permission |
Description |
|---|---|---|---|
0 |
0 |
Visit |
Commands at this level are diagnosis commands such as ping and tracert commands and commands that are used to access a remote device such as Telnet clients. |
1 |
0 and 1 |
Monitoring |
Commands at this level are system maintenance commands such as display commands. NOTE:
Some display commands are not at this level. For example, the display current-configuration and display saved-configuration commands are at level 3. |
2 |
0, 1, and 2 |
Configuration |
Commands at this level are service configuration commands. |
3-15 |
0, 1, 2, and 3 |
Management |
Commands at this level are system basic operation commands that support services, including file system, FTP, TFTP, user management commands, command level configuration commands, and debugging commands. |
Precautions
If refined right management is required, run the command-privilege level command to upgrade command levels.
Example
# Set the user level on the VTY0 user interface to 2.
<AC6605> system-view
[AC6605] user-interface vty 0
[AC6605-ui-vty0] user privilege level 2
# Log in to the device using Telnet and view detailed information about the VTY0 user interface.
<AC6605> display user-interface vty0
Idx Type Tx/Rx Modem Privi ActualPrivi Auth Int
+ 129 VTY 0 - 2 15 N -
+ : Current UI is active.
F : Current UI is active and work in async mode.
Idx : Absolute index of UIs.
Type : Type and relative index of UIs.
Privi: The privilege of UIs.
ActualPrivi: The actual privilege of user-interface.
Auth : The authentication mode of UIs.
A: Authenticate use AAA.
N: Current UI need not authentication.
P: Authenticate use current UI's password.
Int : The physical location of UIs.
Item |
Description |
|---|---|
+ |
Current user interface is active. |
F |
Current user interface is active and work is in asynchronous mode. |
Idx |
Absolute index of user interface. |
Type |
Type and relative index of user interface. |
Privi |
The privilege of user interface. |
ActualPrivi |
The actual privilege of user interface. |
Auth |
The authentication mode of user interface. |
Int |
The physical location of UIs. |
A |
Authenticate use AAA. |
N |
The current user interface need not be authenticated. |
P |
Authenticates the user using the password configured on the current user interface. |
