64
Parameters
name
feature-group-name
: Specifies a feature group name. The
feature-group-name
argument is a
case-sensitive string of 1 to 31 characters.
Usage guidelines
The
L2
feature group includes all Layer 2 feature commands, and the
L3
feature group includes all
Layer 3 feature commands. These predefined feature groups are not user configurable.
In addition to the predefined feature groups
L2
and
L3
, you can create a maximum of 64 user role
feature groups.
After you create a user role feature group, you can use the
display role feature
command to display
the features available in the system. Then you can use the
feature
command to add features to the
feature group.
Examples
# Create a feature group named
security-features
.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features]
Related commands
display role feature-group
display role feature
feature
rule
Use
rule
to create or change a user role rule for controlling access to commands, XML elements, or
MIB nodes.
Use
undo rule
to delete a user role rule.
Syntax
rule
number
{
deny
|
permit
} {
command
command-string
|
{
execute
|
read
|
write
} * {
feature
[
feature-name
] |
feature-group
feature-group-name
|
oid
oid-string
|
xml-element
[
xml-string
] } }
undo rule
{
number
|
all
}
Default
A user-defined user role does not have any rules and cannot use any command, XML element, or
MIB node.
Views
User role view
Predefined user roles
network-admin
mdc-admin
Parameters
number
: Specifies a rule number in the range of 1 to 256.
deny
: Denies access to any specified command, XML element, or MIB node.
permit
: Permits access to any specified command, XML element, or MIB node.
