FibeAir IP-20C/S/E
User Guide
Ceragon Proprietary and Confidential
Page 529 of 597
21.3.2
Configuring User Profiles (CLI)
User profiles enable you to define system access levels. Each user must be
assigned a user profile. Each user profile contains a detailed set of read
and write permission levels per functionality group.
The system includes a number of pre-defined user profiles. You can edit these
profiles, and add user profiles. Together, the system supports up to 50 user
profiles.
To create a new user profile with default settings, enter the following
command:
root> platform security access-control profile add name
<profile-name>
To edit the settings of a user profile, enter the following command:
root> platform security access-control profile edit group name
<profile-name> group <group> write-lvl <write-lvl> read-
lvl <read-lvl>
Table 208: User Profile CLI Parameters
Parameter
Input Type Permitted Values Description
profile--name
Text String
Up to 49 characters
The name of the user profile.
group
Variable
security
management
radio
ethernet
sync
The functionality group for which you are
defining access levels.
write-lvl
Variable
none
normal
advanced
The read level for the functionality group.
read-lvl
Variable
none
normal
advanced
The read level for the functionality group.
Example
The following commands create a user profile called “operator” and give users
to whom this profile is assigned normal write privileges for all system
functionality and advanced read privileges for all functionality except security
features.
root> platform security access-control profile add name
operator
root> platform security access-control profile edit group name
operator group security write-lvl normal read-lvl normal group
management write-lvl normal read-lvl advanced group radio
write-lvl normal read-lvl advanced group ethernet write-
lvl normal read-lvl advanced group sync write-lvl normal read-
lvl advanced
