User guide

Chapter 7: Using the Command Line Interface
213
config:# role modify "<name>" addPrivileges
<privilege1>:<argument1>,<argument2>...;
<privilege2>:<argument1>,<argument2>...;
<privilege3>:<argument1>,<argument2>...;
...
To remove specific privileges from a role, use this command
syntax:
Multiple privileges should be separated with a semi-colon.
config:# role modify "<name>" removePrivileges
<privilege1>;<privilege2>;<privilege3>...
If a specific privilege contains any arguments, add a colon and then
the argument(s) after the privilege.
config:# role modify "<name>" removePrivileges
<privilege1>:<argument1>,<argument2>...;
<privilege2>:<argument1>,<argument2>...;
<privilege3>:<argument1>,<argument2>...;
...
Note: When removing privileges from a role, make sure the specified
privileges and arguments (if any) exactly match those assigned to the role.
Otherwise, the command fails to remove the privileges that you want to
remove.
Variables:
 <name> is a string comprising up to 32 ASCII printable characters.
The <name> variable must be enclosed in quotes when it contains
spaces.
 <privilege1>, <privilege2>, <privilege3> and the like are names of the
privileges assigned to the role.
 <argument1>, <argument2> and the like are arguments set for a
particular privilege.
Example
The following command modifies the privileges of the role "tester."
config:# role modify tester addPrivileges changeAuthentication removePrivileges
firmwareupgrade
Results:
 The "change authentication" privilege is added to the role.
 The "firmware upgrade" privilege is removed from the role.