Reference Guide

role
Changes command permissions for roles.
C9000
Syntax role mode { { { addrole | deleterole } role-name } | reset } command
To delete access to a command, use the no role mode role-name
Parameters
mode
Enter one of the following keywords as the mode for which
you are controlling access:
configure for CONFIGURATION mode
exec for EXEC mode
interface for INTERFACE modes
line for LINE mode
route-map for Route-map mode
router for Router mode
addrole Enter the keyword addrole to add permission to the
command. You cannot add or delete rights for the sysadmin
role.
deleterole
Enter the keyword deleterole to remove access to the
command. You cannot add or delete rights for the sysadmin
role.
role-name Enter a text string for the name of the user role up to 63
characters. These are 3 system defined roles you can
modify: secadmin, netadmin, and netoperator.
reset Enter the keyword reset to reset all roles back to default
for that command.
command Enter the command’s keywords to assign the command to a
certain access level. You can enter one or more keywords.
Defaults none
Command Modes CONFIGURATION
Command History
Version Description
9.9(0.0) Introduced on the C9010.
Security
1797