63
Default
The default user role feature is disabled. AAA users who do not have a user role cannot log in to the
device.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
role-name
: Specifies a user role by its name for the default user role. The user role must already
exist. The argument is a case-sensitive string of 1 to 63 characters. If you do not specify a user role,
the following default user role settings apply:
•
For login to the default MDC, the default user role is network-operator.
•
For login to a non-default MDC, the default user role is mdc-operator.
Usage guidelines
The default user role feature assigns the default user role to AAA-authenticated users if the
authentication server does not assign any user roles to the users. These users are allowed to access
the system with the default user role.
If AAA users have been assigned user roles, they log in with the user roles.
Examples
# Enable the default user role feature.
<Sysname> system-view
[Sysname] role default-role enable
Related commands
role
role feature-group
Use
role feature-group
to create a user role feature group and enter user role feature group view.
Use
undo role feature-group
to delete a user role feature group.
Syntax
role feature-group name
feature-group-name
undo role feature-group name
feature-group-name
Default
Two user role feature groups,
L2
and
L3
, are created.
Views
System view
Predefined user roles
network-admin
mdc-admin
