command authorization

Use command authorization to enable command authorization.

Use undo command authorization to restore the default.

Syntax

command authorization

undo command authorization

Default

Command authorization is disabled. Logged-in users can execute commands without authorization.

Views

User line view, user line class view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

When command authorization is enabled, a command is available only if the user has the commensurate user role and is authorized to use the command by the AAA scheme.

If the command authorization command is configured in user line class view:

• Command authorization is enabled on all user lines in the class.

• You cannot configure the undo command authorization command in the view of a user line in the class.

Examples

# Enable command accounting for VTY 0 so its user can execute only authorized commands that are permitted by the user role.

<Sysname> system-view
[Sysname] line vty 0
[Sysname-line-vty0] command authorization

Related commands

authorization command (Security Command Reference)