command-privilege level
Function
The command-privilege level command sets the command level in a specified view.
The undo command-privilege command restores the default command level.
By default, each command in each view has a default command level.
Format
command-privilege level level view view-name command-key
undo command-privilege view view-name command-key
Parameters
| Parameter | Description | Value |
|---|---|---|
| level level | Specifies the command level. | The value is an integer that ranges from 0 to 15. |
| view view-name | Specifies the view name. You can enter a question mark (?) in the terminal GUI to obtain all view names in the command view. |
- |
| command-key | Specifies a command. The command must be entered manually because automatic command line completion is not supported. |
- |
Usage Guidelines
Usage Scenario
The system divides commands into four levels and sets the command level in the specified view. The device administrator can change the command level as required, so that a lower-level user can use some high-level commands. The device administrator can also change the command level to a larger value to improve device security.
Precautions
You are advised not to change the default command level. If you need to change it, consult with professional personnel to ensure that routine operations and maintenance are not affected and security risk is avoided.
When you run this command to lower the level of a command, pay attention to relative commands in the upper-layer view of the command. If the level of commands in the upper-layer view is lower the current command level, users of the corresponding level cannot run the command for which the level is lowered because the users cannot enter the upper-layer view.
The rules for using this command to set the command level of a specified view are as follows:
- When you degrade the target command, all keywords in the command are degraded.
- When you upgrade the target command, only the last keyword in the command is upgraded.
- When you set a level for the target command, the levels of all commands (in the same view) starting with this command are changed.
- When you set a level for the target command, the keyword level in other commands having the same index as the keyword whose level is changed is also changed.
- If the level of keywords that have the same index is modified for multiple times, the latest configured level takes effect.
- enable log [ config | state | error | snmp-trap ]
- config lock
- config unlock interval time
- diagnose
- quit
- return
- cls
