Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Predefined User Groups

Hello everybody,

Please tell me, how can I check what tasks and permissions contains each predefined user group:

root-system: Root system users

root-lr: Root logical router users

netadmin: Network administrators

sysadmin: System administrators

operator: Operators performing day-to-day activities

cisco-support: highest level of privilege allowing lowest level access

I don't see it into my config:

RP/0/RSP0/CPU0:R01#show running-config taskgroup root-system

% No such configuration item(s)

RP/0/RSP0/CPU0:london01#

I can assign a user to only one group and check it like this, but I believe I can do it in more smart way...

RP/0/RSP0/CPU0:R01#sh user group   

root-system

RP/0/RSP0/CPU0:R01#

!

RP/0/RSP0/CPU0:R01#sh user tasks

Task:                  aaa  : READ    WRITE    EXECUTE    DEBUG

Task:                  acl  : READ    WRITE    EXECUTE    DEBUG

Task:                admin  : READ    WRITE    EXECUTE    DEBUG

Task:                 ancp  : READ    WRITE    EXECUTE    DEBUG

...

!

Thank you in advance,

Dmitry

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Predefined User Groups

Hi Dmitry,

You can use 'show aaa taskgroup '

HTH,

Sam

2 REPLIES
Cisco Employee

Predefined User Groups

Hi Dmitry,

You can use 'show aaa taskgroup '

HTH,

Sam

New Member

Predefined User Groups

hi Samuel,

Great!  Thank you very much!

RP/0/RSP0/CPU0:london01#sh aaa taskgroup cisco-support

Task group 'cisco-support' has the following combined set

  of task IDs (including all inherited groups):

Task:        cisco-support  : READ    WRITE    EXECUTE    DEBUG (reserved)

RP/0/RSP0/CPU0:london01#sh aaa taskgroup sysadmin     

Task group 'sysadmin' has the following combined set

  of task IDs (including all inherited groups):

Task:                  aaa  : READ                            

Task:                   acl  : READ    WRITE    EXECUTE    DEBUG

Task:                admin  : READ                            

Task:                 ancp  : READ                            

Task:                  atm  : READ  

...

--

Best regards,

Dmitry                      

212
Views
0
Helpful
2
Replies
CreatePlease login to create content