63
Use
undo role feature-group
to delete a user role feature group.
Syntax
role feature-group name
feature-group-name
undo role feature-group name
feature-group-name
Default
Two user role feature groups,
L2
and
L3
, are created.
Views
System view
Predefined user roles
network-admin
Parameters
name
feature-group-name
: Specifies a feature group name. The
feature-group-name
argument is a
case-sensitive string of 1 to 31 characters.
Usage guidelines
The
L2
feature group includes all Layer 2 feature commands, and the
L3
feature group includes all Layer
3 feature commands. These predefined feature groups are not user configurable.
In addition to the predefined feature groups
L2
and
L3
, you can create a maximum of 64 user role feature
groups.
After you create a user role feature group, you can use the
display role feature
command to display the
features available in the system. Then you can use the
feature
command to add features to the feature
group.
Examples
# Create the feature group
security-features
.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features]
Related commands
•
display role feature-group
•
display role feature
•
feature
rule
Use
rule
to create or change a user role rule for controlling command, XML element, or MIB node access.
Use
undo rule
to delete a user role rule.
Syntax
rule
number
{
deny
|
permit
} {
command
command-string
|
{
execute
|
read
|
write
} * {
feature
[
feature-name
] |
feature-group
feature-group-name
|
oid
oid-string
|
xml-element
[
xml-string
] } }
undo rule
{
number
|
all
}
