Technical data

ServerIron ADX Administration Guide 143
53-1002434-01
Command Line Interface
3
When privileges for a user are changed after the user login, the user's privilege takes effect
immediately
Command Line Interface
After user login, the user is automatically associated with the configured context (if there is only
one) or the default context (if there are more than one and a default context is configured). If no
context is associated with the user, the user must use the "context <name>" command to select a
context before the user can edit context-related configurations.
If a user has the privilege to multiple contexts, the user can use the same context <name>
command to switch between different contexts.
The show user role command is provided to display available contexts and corresponding privilege
available for the given user. The same information is also available if the show who command is
issued.
The show run context <ctxt-name> command displays configurations of the given context.
The super user can use "context <name>" to create a new context and "no context <name>" to
remove it. The built-in default context (shown as "context default") cannot be removed. In
configuration file, "context <name>" separates configurations of each context.
The super user can use the "role template <name>" command to create a new role template.
The super user can use "role default" to create a special template. The roles defined in the
template are automatically assigned to any level-1 user to whom no templates or privileges have
been assigned.
The following commands can be used to associate roles to a template or a user.
• global all manager|viewer|none
• context <ctxt_name> manager|operator|viewer|none
• default-context <ctxt-name>
A user can also inherit privileges from a template by using the following command:
• role template <tpl_name>
Example
ServerIronADX(config)# role template t1
ServerIronADX(config-role-template-t1)# global all viewer
ServerIronADX(config-role-template-t1)# context c1 operator
ServerIronADX(config-role-template-t1)# context c2 manager
ServerIronADX(config-role-template-t1)# context c3 viewer
ServerIronADX(config-role-template-t1)# default-context c2
ServerIronADX(config)# username u1 privilege 1 password passw0rd
ServerIronADX(config-role-user-u1)# global all none
ServerIronADX(config-role-user-u1)# context c4 manager
ServerIronADX(config-role-user-u1)# role template t1
ServerIronADX(config-role-user-u1)# default-context c4
The role can only be associated with users with privilege level 1. After a privilege level 1 user is
created, the super user can assign roles or make changes to the user by re-issuing the username
command and entering the role configuration mode for that user.