Dell PowerSwitch S4128F-ON OS10 Enterprise Edition User Guide Release 10.4.3.0 - Page 798

Privilege mode CLI mode router router-bgp or router-ospf line line-vty • priv-lvl-Enter the keyword and then the privilege number, from 2 to 14. • command-string-Enter the specific command. 2 Create a user name and password and assign a privilege level. CONFIGURATION username username password password role role [ priv-lvl privilege-level] • username username-Enter a text string. A maximum of 32 alphanumeric characters; one character minimum. • password password-Enter a text string. A maximum of 32 alphanumeric characters; nine characters minimum. • role role-Enter a user role: - sysadmin-Full access to all commands in the system, exclusive access to commands that manipulate the file system, and access to the system shell. A system administrator can create user IDs and user roles. - secadmin-Full access to configuration commands that set security policy and system access, such as password strength, AAA authorization, and cryptographic keys. A security administrator can display security information, such as cryptographic keys, login statistics, and log information. - netadmin-Full access to configuration commands that manage traffic flowing through the switch, such as routes, interfaces, and access control lists (ACLs). A network administrator cannot access configuration commands for security features or view security information. - netoperator-Access to EXEC mode to view the current configuration. A network operator cannot modify any configuration setting on a switch. • priv-lvl privilege-level-Enter a privilege level, from 0 to 15. If you do not specify the priv-lvl option, the system assigns privilege level 1 for the netoperator user and privilege level 15 for the sysadmin, secadmin, and netadmin users. The following is an example of configuring privilege levels and assigning them to a user: OS10(config)# privilege exec priv-lvl 12 "show version" OS10(config)# privilege exec priv-lvl 12 "configure terminal" OS10(config)# privilege configure priv-lvl 12 "interface ethernet" OS10(config)# privilege interface priv-lvl 12 "ip address" OS10(config)# username delluser password $6$Yij02Phe2n6whp7b$ladskj0HowijIlkajg981 role secadmin priv-lvl 12 The following example shows the privilege level of the current user: OS10# show privilege Current privilege level is 15. The following example displays the privilege levels of all users who are logged into OS10: OS10# show users Index Line User Role Application Idle Login-Time Location Privilege -------- --------- 1 pts/0 admin sysadmin bash >24h 2018-09-08 T06:51:37Z 10.14.1.91 [ssh] 15 2 pts/1 netad netadmin bash >24h 2018-09-08 T06:54:33Z 10.14.1.91 [ssh] 10 Configure enable password To configure an enable password: 1 Configure a privilege level and assign commands to it. CONFIGURATION privilege mode priv-lvl privilege-level command-string 798 Security