Dell EMC SmartFabric OS10 User Guide Release 10.5.1

Privilege levels

Controlling terminal access to a switch is one method of securing the device and network. To increase security, you can limit user access to a subset of commands using privilege levels.

Configure privilege levels, add commands to them, and restrict access to the command line with passwords. The system supports 16 privilege levels:

• Level 0—Provides users the least privilege, restricting access to basic commands.
• Level 1—Provides access to a set of show commands and certain operations such as ping, traceroute, and so on.
• Level 15—Provides access to all available commands for a particular user role.
• Levels 0, 1, and 15—System configured privilege levels with a predefined command set.
• Levels 2 to 14—Not configured. You can customize these levels for different users and access rights.

Privilege levels inherit the commands supported on all lower levels. After logging in with a user role, a user has access to commands assigned to his privilege level and lower levels.

For users assigned to the sysadmin, netadmin, and secadmin roles, you cannot configure a privilege level lower than 2. You can configure netoperator users with privilege levels 0 or 1.

After you assign commands to privilege levels, assign the privilege level to users with the username command. Use the enable password privilege-level command to switch between privilege levels and access the commands supported at each level. The disable command takes the user to a lower level.