62
Related commands
•
display role
•
interface policy deny
•
rule
•
vlan policy deny
•
vpn-instance policy deny
role default-role enable
Use
role default-role enable
to enable the default user role feature for remote AAA users.
Use
undo role default-role enable
to restore the default.
Syntax
role default-role enable
[
role-name
]
undo role default-role enable
Default
The default user role feature is disabled. AAA users who do not have a user role cannot log in to the
device.
Views
System view
Predefined user roles
network-admin
Parameters
role-name
: Specifies a user role by its name for the default user role. The user role must already exist. The
argument is a case-sensitive string of 1 to 63 characters. If you do not specify this argument, the default
user role is network-operator.
Usage guidelines
The default user role feature assigns the default user role to AAA-authenticated users if the authentication
server does not assign any user roles to the users. These users are allowed to access the system with the
default user role.
If AAA users have been assigned user roles, they log in with the user roles.
Examples
# Enable the default user role feature.
<Sysname> system-view
[Sysname] role default-role enable
Related commands
role
role feature-group
Use
role feature-group
to create a user role feature group and enter user role feature group view.