Concept Guide

Conguring AAA Accounting for Roles
To congure AAA accounting for roles, use the aaa accounting command in CONFIGURATION mode.
aaa accounting {system | exec | commands {level | role role-name}} {name | default} {start-stop
| wait-start | stop-only} {tacacs+}
Example of Conguring AAA Accounting for Roles
The following example shows you how to congure AAA accounting to monitor commands executed by the users who have a secadmin
user role.
DellEMC(conf)#aaa accounting command role secadmin default start-stop tacacs+
Applying an Accounting Method to a Role
To apply an accounting method list to a role executed by a user with that user role, use the accounting command in LINE mode.
accounting {exec | commands {level | role role-name}} method-list
Example of Applying an Accounting Method to a Role
The following example applies the accounting default method to the user role secadmin (security administrator).
DellEMC(conf-vty-0)# accounting commands role secadmin default
Displaying Active Accounting Sessions for Roles
To display active accounting sessions for each user role, use the show accounting command in EXEC mode.
Example of Displaying Active Accounting Sessions for Roles
DellEMC#show accounting
Active accounted actions on tty2, User john Priv 1 Role netoperator
Task ID 1, EXEC Accounting record, 00:00:30 Elapsed,
service=shell
Active accounted actions on tty3, User admin Priv 15 Role sysadmin
Task ID 2, EXEC Accounting record, 00:00:26 Elapsed,
service=shell
Display Information About User Roles
This section describes how to display information about user roles and consists of the following topics:
Displaying User Roles
Displaying Information About Roles Logged into the Switch
Displaying Active Accounting Sessions for Roles
Displaying User Roles
To display user roles using the show userrole command in EXEC Privilege mode, use the show userroles and show users
commands in EXEC privilege mode.
Example of Displaying User Roles
DellEMC#show userroles
Role Inheritance Modes
netoperator Exec
788
Security