66 BSGX4e Business Gateway User Guide
NN47928-102 Release 01.01
User Rights
This section describes how to configure a record that defines the access of a group
to certain objects. The available access rights are read, write, and execute. Read
allows the viewing of data; write allows the writing of data; execute is not currently
used.
A group can have more than one rights record defined for it. For example, the
predefined rights records useradv and userbasic are both defined for the same user
group: the user group users. In this case, two rights records are defined so that the
user group can be granted different access to different objects in the system, as
follows:
The useradv record applies to objects that belong to Admins; it grants only read
access.
The userbasic record applies to objects that belong to Users; it grants both read
and write access.
NOTE: In most cases, the default user rights records should suffice; do not
change them unless the effects of authority and object ownership are
clearly understood.
Command Authority
Commands are objects that belong to either Admins or Users. When you list the
online help for a command (by entering the command followed by a question mark
(?) or tab key), you see a line for Authority, for example:
> ping?
Command: ping
Desc: Ping another device on the network
Authority: Users
If the Authority is Users, the command is an object that belongs to Users, and the
right to use that command is governed by the rights record that grants access to
objects belonging to Users.
In general, commands that require write access, such as config commands, have
Admins authority. Commands that only display data, such as show and stats, have
Users authority. Similarly, maintenance commands that require write access have
Admins authority.
The notable exception is the save command that saves configuration changes; it has
Users authority so it is available to all users belonging to groups admins or users.
Configuration Requirements
You must configure the user group before you can configure a rights record for it.
For more information, see “User Groups” (page 64).
NOTE: In most cases, the default settings provide the appropriate permissions
per user level. It is recommended not to change the settings unless
