H3C A7500 : Create local-user with read-only privilege

[ferdo]

Hi,

On my H3C A7500, I want to create a local-user with read-only access.

When I attribute level 1 for my local-user, He cannot display the switch configuration.

But when I attribute level 2 for my local-user, He can do "system-view" command - what I do not want.

How can I create a user that can only read the switch configuration, but can not change the switch configuration ?

Thank you for your help.

Regards

Ferdo

[sdide · Accepted solution]

Hi ferdo

you could allow display current-configuration in privilege level 0 and in user-view using:

]command-privilege level 0 view user-view display current-configuration

EDIT: hmmm, that does not seem to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.) 

EDIT2 : If you choose another view, for example user-interface it seems to work e.g:

]command-privilege level 0 view user-interface display current-configuration

... hmmm.

Regards

[ferdo]

Hi sdide,

Thank you for your help.

It works.

Great thank you.

Ferdo

---

@sdide wrote:

Hi ferdo

you could allow display current-configuration in privilege level 0 and in user-view using:

]command-privilege level 0 view user-view display current-configuration

EDIT; hmmm, that does seems to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.

Regards

---

---

@sdide wrote:

Hi ferdo

you could allow display current-configuration in privilege level 0 and in user-view using:

]command-privilege level 0 view user-view display current-configuration

EDIT; hmmm, that does seems to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.

Regards

---

---

@sdide wrote:

Hi ferdo

you could allow display current-configuration in privilege level 0 and in user-view using:

]command-privilege level 0 view user-view display current-configuration

EDIT; hmmm, that does seems to work tho - I was too fast. You can't choose user-view in that command.. (at least its not called user-view.

Regards

---