Chapter 21: Access Management and Security (CLI)
Configuring Users (CLI)
phn-3963_004v000
Page 21-405
Configuring User Profiles (CLI)
User profiles enable you to define system access levels. Each user must be assigned a user profile.
Each user profile contains a detailed set of read and write permission levels per functionality
group.
The system includes a number of pre-defined user profiles. You can edit these profiles, and add
user profiles. Together, the system supports up to 50 user profiles.
To create a new user profile with default settings, enter the following command:
root> platform security access-control profile add name <profile-name>
To edit the settings of a user profile, enter the following command:
root> platform security access-control profile edit group name <profile-
name> group <group> write-lvl <write-lvl> read-lvl <read-lvl>
Table 200 User Profile CLI Parameters
Parameter
Input Type
Permitted Values
Description
profile--
name
Text String
Up to 49 characters
The name of the user profile.
group
Variable
security
management
radio
ethernet
sync
The functionality group for which
you are defining access levels.
write-lvl
Variable
none
normal
advanced
The read level for the functionality
group.
read-lvl
Variable
none
normal
advanced
The read level for the functionality
group.
Example
The following commands create a user profile called “operator” and give users to whom this
profile is assigned normal write privileges for all system functionality and advanced read
privileges for all functionality except security features.
root> platform security access-control profile add name operator
root> platform security access-control profile edit group name operator
group security write-lvl normal read-lvl normal group management write-
lvl normal read-lvl advanced group radio write-lvl normal read-
lvl advanced group ethernet write-lvl normal read-lvl advanced group sync
write-lvl normal read-lvl advanced
