H3C SOHO IE4300, Command Reference Manual

Page: 109 / 3296

54
Related commands
user-interface
user-role
Use user-role to assign a user role to a user line. The device assigns the user role to a user of the
line when the user logs in.
Use undo user-role to remove a user role or restore the default.
Syntax
user-role role-name
undo user-role [ role-name ]
Default
A console or USB user is assigned the network-admin user role. Other users are assigned the
network-operator user role.
Views
User line view
User line class view
Predefined user roles
network-admin
Parameters
role-name : Specifies a user role name, a case-sensitive string of 1 to 63 characters. The user role
can be user-defined or predefined. Available predefined user roles include network-admin,
network-operator, and level-0 to level-15. The predefined security-audit and guest-manager user
roles are not supported in user line view or user line class view. If you do not specify this argument,
the
undo user-role
command restores the default user role.
Usage guidelines
This command is not supported in FIPS mode.
Only users assigned the network-admin, or level-15 user role can execute this command. Other
users cannot execute this command, even if they are granted the right to execute this command.
This command is available in both user line view and user line class view. A non-default setting in
either view takes precedence over a default setting in the other view. A non-default setting in user
line view takes precedence over a non-default setting in user line class view.
A user role change does not take effect for the current session. It takes effect for subsequent login
sessions.
You can assign up to 64 user roles to a user line.
For more information about user roles, see RBAC configuration in Fundamentals Configuration
Guide .
Examples
# Assign user role network-admin to AUX line 0.
<Sysname> system-view
[Sysname] line aux 0
[Sysname-line-aux0] user-role network-admin