By default, the user group "root-system" is created by the system at the time of root user creation.
The root user is part of this user group. Users added to this group get root user permissions.
Note
Step 4
users user_name
Example:
sysadmin-vm:0_RP0#(config-group-gr1)#users us1
Specify the name of the user that should be part of the user group.
You can specify multiple user names enclosed withing double quotes. For example,
users
"
user1 user2 ...
".
Step 5
gid group_id_value
Example:
sysadmin-vm:0_RP0#(config-group-gr1)#gid 50
Specify a numeric value. You can enter any 32 bit integer.
Step 6
Use the
commit
or
end
command.
commit
-Saves the configuration changes and remains within the configuration session.
end
-Prompts user to take one of these actions:
•
Yes
-Saves configuration changes and exits the configuration session.
•
No
-Exits the configuration session without committing the configuration changes.
•
Cancel
-Remains in the configuration session, without committing the configuration changes.
What to do next
• Create command rules. See
Create Command Rules, on page 40
.
• Create data rules. See
Create Command Rules
Command rules are rules based on which users of a user group are either permitted or denied the use of certain
commands. Command rules are associated to a user group and get applied to all users who are part of the user
group.
A command rule is created by specifying whether an operation is permitted, or denied, on a command. This
table lists possible operation and permission combinations:
Reject Permission
Accept Permission
Operation
Command is not displayed on the CLI when
"?" is used.
Command is displayed on the CLI when
"?" is used.
Read (R)
Command cannot be executed from the CLI.
Command can be executed from the CLI.
Execute (X)
System Setup and Software Installation Guide for Cisco NCS 1002
40
Create User Profiles and Assign Privileges
Create Command Rules
