Cisco Nexus 9000 Series, Configuration Manual

Page: 122 / 562

Purpose Command or Action
switch(config)# copy running-config
startup-config
Exits global configuration mode.
exit
Example:
Step 7
switch(config)# exit
switch#
Enables a user to move to a higher privilege level. This
command prompts for the secret password. The
level
enable level
Example:
Step 8
argument specifies the privilege level to which the user is
granted access. The only available level is 15.
switch# enable 15
Related Topics
Permitting or Denying Commands for Users of Privilege Roles , on page 96
Creating User Roles and Rules , on page 162
Permitting or Denying Commands for Users of Privilege Roles
As a network administrator, you can modify the privilege roles to permit users to execute specific commands
or to prevent users from running those commands.
You must follow these guidelines when changing the rules of privilege roles:
• You cannot modify the priv-14 and priv-15 roles.
• You can add deny rules only to the priv-0 role.
• These commands are always permitted for the priv-0 role: configure , copy , dir , enable , ping , show ,
ssh , telnet , terminal , traceroute , end , and exit .
SUMMARY STEPS
1. configure terminal
2.
[ no ] role name priv-n
3.
rule number
{
deny
|
permit
}
command command-string
4. exit
5. (Optional) copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
96
Configuring
Permitting or Denying Commands for Users of Privilege Roles