4.
User Privilege Levels
MN700004 Rev 01
28
Creating a New User with a Privilege Level
The
username
command, in Global Configuration mode, establishes a username-based
authentication system.
The command creates a new user, assigns a password to this user, and specifies the access
privilege level for this user.
If a password confirmation is required, the second password must be identical to the first.
By default, the local user is assigned privilege level 0 and RADIUS users are assigned
privilege level 15.
Command Syntax
device-name
(config)#
username
USER-NAME
password
PASSWORD
[CONFIRM-
PASSWORD] [
group
{
administrators
|
net-admins
|
technicians|users
|
guests
}]
Argument Description
USER-NAME
Specifies the name of the user. A character string consisting of any characters
except for blank spaces and question marks.
password
PASSWORD
CONFIRM-
PASSWORD
The password assigned to the user. A character string without blank spaces.
Type the password again for confirmation.
Type the password again for confirmation.
group
Sets the privilege group for the user. If the
group
option is not used, the user
will be assigned Administrators privilege.
administrators
Assigns the user group Administrators privilege, with full read/write privilege
without restrictions.
net-admins
technicians
Assigns the user group Net-admins privilege, with read/write privilege without
access to security settings, software upgrade, debug settings, reload and script
File System.
Assigns the user group Technicians privilege, with read/write privilege for Layer
2 and read-only privilege for Layer 3.
users
Assigns the user group Users privilege, with read-only permission.
guests
Assigns the user group Guests privilege, with read-only privilege in non-
privileged mode
Example
The following example shows how to create a user and assign a privilege level to this user:
device-name
(config)#
username ME password YES group users
Displaying the User’s Privilege Level
The
show privilege
command, in Privileged (Enable) mode, displays the assigned user
privilege level.
Command Syntax
device-name
#
show privilege
