By default, access to the CSS user database is not restricted. Nonrestricted access means any user with SuperUser privileges (local user, administrator, or technician) can:

?Create, modify, or delete usernames (user database entries)

?Clear the CSS running-config file

You can use the restrict user-database command to restrict the CSS user database to CSS users who are identified as either an administrator or a technician.

To restrict modification of the CSS user database, enter:

(config)# restrict user-database

To remove restrictions for modifying the CSS user database, enter:

(config)# no restrict user-database