Dell C1048P Port Extender Networking Configuration Guide for the C9000 Series - Page 60

4 Switch Management This chapter describes the switch management tasks supported on the switch. Configuring Privilege Levels Privilege levels restrict access to commands based on user or terminal line. There are 16 privilege levels, of which three are pre-defined. The default privilege level is 1. Level Level 0 Level 1 Level 15 Description Access to the system begins at EXEC mode, and EXEC mode commands are limited to enable, disable, and exit. Access to the system begins at EXEC mode, and all commands are available. Access to the system begins at EXEC Privilege mode, and all commands are available. For information about how access and authorization is controlled based on a user's role, see Role-Based Access Control. Creating a Custom Privilege Level Custom privilege levels start with the default EXEC mode command set. You can then customize privilege levels 2-14 by: • restricting access to an EXEC mode command • moving commands from EXEC Privilege to EXEC mode • restricting access A user can access all commands at his privilege level and below. Removing a Command from EXEC Mode To remove a command from the list of available commands in EXEC mode for a specific privilege level, use the privilege exec command from CONFIGURATION mode. In the command, specify a level greater than the level given to a user or terminal line, then the first keyword of each command you wish to restrict. Moving a Command from EXEC Privilege Mode to EXEC Mode To move a command from EXEC Privilege to EXEC mode for a privilege level, use the privilege exec command from CONFIGURATION mode. In the command, specify the privilege level of the user or terminal line and specify all keywords in the command to which you want to allow access. 60 Switch Management