Cambium Networks PTP 820 Series, User Manual, Page: 1021 / 1149

Chapter 23: Access Management and Security (CLI) Configuring Users (CLI)
phn-3965_006v002
Page 23-8
Configuring User Profiles (CLI)
User profiles enable you to define system access levels. Each user must be assigned a user profile. Each user profile
contains a detailed set of read and write permission levels per functionality group.
To create a new user profile with default settings, enter the following command:
root> platform security access-control profile add name <profile-name>
To edit the settings of a user profile, enter the following command:
root> platform security access-control profile edit group name <profile-
name> group <group> write-lvl <write-lvl> read-lvl <read-lvl>
Table 309 User Profile CLI Parameters
Parameter Input Type Permitted Values Description
profile--name Text String Up to 49 characters The name of the user profile.
group Variable security
management
radio
ethernet
sync
The functionality group for which you
are defining access levels.
write-lvl Variable none
normal
advanced
The read level for the functionality
group.
read-lvl Variable none
normal
advanced
The read level for the functionality
group.
The following commands create a user profile called “operator” and give users to whom this profile is assigned
normal write privileges for all system functionality and advanced read privileges for all functionality except security
features.
root> platform security access-control profile add name operator
root> platform security access-control profile edit group name operator
group security write-lvl normal read-lvl normal group management write-
lvl normal read-lvl advanced group radio write-lvl normal read-
lvl advanced group ethernet write-lvl normal read-lvl advanced group sync
write-lvl normal read-lvl advanced
Limiting Access Protocols for a User Profile (CLI)
The user profile can limit the access channels that users with the user profile can use to access the system. By
default, a user profile includes all access channels.
Use the following command to limit the protocols users with this user profile can use to access the system.