Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell Configuration Guide for the S4048–ON System 9.14.2.4

PDF

Configuring Custom Privilege Levels

In addition to assigning privilege levels to the user, you can configure the privilege levels of commands so that they are visible in different privilege levels.

Within Dell EMC Networking OS, commands have certain privilege levels. With the privilege command, you can change the default level or you can reset their privilege level back to the default.
  • Assign the launch keyword (for example, configure) for the keyword’s command mode.
  • If you assign only the first keyword to the privilege level, all commands beginning with that keyword are also assigned to the privilege level. If you enter the entire command, the software assigns the privilege level to that command only.

To assign commands and passwords to a custom privilege level, use the following commands. You must be in privilege level 15.

  1. Assign a user name and password.
    CONFIGURATION mode
    username name [access-class access-list-name] [privilege level] [nopassword | password [encryption-type] password Secret]
    Configure the optional and required parameters:
    • name: Enter a text string up to 63 characters(maximum) long.
    • access-class access-list-name: Restrict access by access-class..
    • privilege level: The range is from 0 to 15.
    • nopassword: No password is required for the user to log in.
    • encryption-type: Enter 0 for plain text or 7 for encrypted text.
    • password: Enter a string. Specify the password for the user.
    • Secret: Specify the secret for the user.
  2. Configure a password for privilege level.
    CONFIGURATION mode
    enable password [level level] [encryption-mode] password
    Configure the optional and required parameters:
    • level level: specify a level from 0 to 15. Level 15 includes all levels.
    • encryption-type: enter 0 for plain text or 7 for encrypted text.
    • password: enter a string up to 32 characters long.
    To change only the password for the enable command, configure only the password parameter.
  3. Configure level and commands for a mode or reset a command’s level.
    CONFIGURATION mode
    privilege mode {level level command | reset command}
    Configure the following required and optional parameters:
    • mode: enter a keyword for the modes (exec, configure, interface, line, route-map, or router)
    • level level: the range is from 0 to 15. Levels 0, 1, and 15 are pre-configured. Levels 2 to 14 are available for custom configuration.
    • command: an Dell EMC Networking OS CLI keyword (up to five keywords allowed).
    • reset: return the command to its default privilege mode.

Examples of Privilege Level Commands

To view the configuration, use the show running-config command in EXEC Privilege mode.

The following example shows a configuration to allow a user john to view only EXEC mode commands and all snmp-server commands. Because the snmp-server commands are enable level commands and, by default, found in CONFIGURATION mode, also assign the launch command for CONFIGURATION mode, configure, to the same privilege level as the snmp-server commands.

Line 1: The user john is assigned privilege level 8 and assigned a password.

Line 2: All other users are assigned a password to access privilege level 8.

Line 3: The configure command is assigned to privilege level 8 because it needs to reach CONFIGURATION mode where the snmp-server commands are located.

Line 4: The snmp-server commands, in CONFIGURATION mode, are assigned to privilege level 8.

DellEMC(conf)#username john privilege 8 password john
DellEMC(conf)#enable password level 8 notjohn
DellEMC(conf)#privilege exec level 8 configure
DellEMC(conf)#privilege config level 8 snmp-server
DellEMC(conf)#end
DellEMC#show running-config
Current Configuration ...
!
hostname Force10
!
enable password level 8 notjohn
enable password Force10
!
username admin password 0 admin
username john password 0 john privilege 8
!

The following example shows the Telnet session for user john. The show privilege command output confirms that john is in privilege level 8. In EXEC Privilege mode, john can access only the commands listed. In CONFIGURATION mode, john can access only the snmp-server commands.

apollo% telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: john
Password:
DellEMC#show priv
Current privilege level is 8
DellEMC#?
configure      Configuring from terminal
disable        Turn off privileged commands
enable         Turn on privileged commands
exit           Exit from the EXEC
no             Negate a command
show           Show running system information
terminal       Set terminal line parameters
traceroute     Trace route to destination
DellEMC#confi
DellEMC(conf)#?
end            Exit from Configuration mode
exit           Exit from Configuration mode
no             Reset a command
snmp-server    Modify SNMP parameters
DellEMC(conf)#

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\