Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

H3C A7500 : Create local-user with read-only privilege

 
SOLVED
Go to solution
ferdo
Advisor

H3C A7500 : Create local-user with read-only privilege

Hi,

 

On my H3C A7500, I want to create a local-user with read-only access.

When I attribute level 1 for my local-user, He cannot display the switch configuration.

But when I attribute level 2 for my local-user, He can do "system-view" command - what I do not want.

 

How can I create a user that can only read the switch configuration, but can not change the switch configuration ?

 

Thank you for your help.

 

Regards

Ferdo

2 REPLIES
sdide
Respected Contributor
Solution

Re: H3C A7500 : Create local-user with read-only privilege

Hi ferdo

 

you could allow display current-configuration in privilege level 0 and in user-view using:

 

]command-privilege level 0 view user-view display current-configuration

 

 

EDIT: hmmm, that does not seem to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.) 

 

EDIT2 : If you choose another view, for example user-interface it seems to work e.g:

]command-privilege level 0 view user-interface display current-configuration

 

... hmmm.

 

Regards

Søren Dideriksen, Network Administrator
Region Midtjylland
ferdo
Advisor

Re: H3C A7500 : Create local-user with read-only privilege

Hi sdide,

 

Thank you for your help.

It works.

Great thank you.

 

Ferdo


sdide wrote:

Hi ferdo

 

you could allow display current-configuration in privilege level 0 and in user-view using:

 

]command-privilege level 0 view user-view display current-configuration

 

EDIT; hmmm, that does seems to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.

 

Regards



sdide wrote:

Hi ferdo

 

you could allow display current-configuration in privilege level 0 and in user-view using:

 

]command-privilege level 0 view user-view display current-configuration

 

EDIT; hmmm, that does seems to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.

 

Regards



sdide wrote:

Hi ferdo

 

you could allow display current-configuration in privilege level 0 and in user-view using:

 

]command-privilege level 0 view user-view display current-configuration

 

EDIT; hmmm, that does seems to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.

 

Regards