show cli authorization
Syntax
Release Information
Command introduced before Junos OS Release 7.4.
Command introduced in Junos OS Release 9.0 for EX Series switches.
Command introduced in Junos OS Release 11.1 for the QFX Series.
Description
Display the permissions for the current user.
Options
This command has no options.
Required Privilege Level
view
List of Sample Output
show cli authorizationOutput Fields
Table 1 lists the output fields for the show cli authorization command. In the table, all possible permissions are displayed and output fields are listed in alphabetical order.
Table 1: show cli authorization Output Fields
Field Name | Field Description |
|---|---|
access | Can view access configuration information. |
access-control | Can modify access configuration. |
admin | Can view user account information. |
admin-control | Can modify user account information. |
clear | Can clear learned network information. |
configure | Can enter configuration mode. |
control | Can modify any configuration. |
edit | Can edit configuration files. |
field | Reserved for field (debugging) support. |
firewall | Can view firewall configuration information. |
firewall-control | Can modify firewall configuration information. |
floppy | Can read from and write to removable media. |
flow-tap | Can view flow-tap configuration information. |
flow-tap-control | Can configure flow-tap configuration information. |
idp-profiler-operation | Can configure Profiler data. |
interface | Can view interface configuration information. |
interface-control | Can modify interface configuration information. |
maintenance | Can perform system maintenance. |
network | Can access the network by entering the ping, ssh, telnet, and traceroute commands. |
pgcp-session-mirroring | Can view Packet Gateway Control Protocol session mirroring configuration. |
pgcp-session-mirroring-control | Can modify Packet Gateway Control Protocol session mirroring configuration all-control. |
reset | Can reset or restart interfaces and system processes. |
rollback | Can roll back to previous configurations. |
routing | Can view routing configuration information. |
routing-control | Can modify routing configuration information. |
secret | Can view passwords and authentication keys in the configuration. |
secret-control | Can modify passwords and authentication keys in the configuration. |
security | Can view security configuration information. |
security-control | Can modify security configuration information. |
shell | Can start a local shell. |
snmp | Can view SNMP configuration information. |
snmp-control | Can modify SNMP configuration information. |
system | Can view system configuration information. |
system-control | Can modify system configuration information. |
trace | Can view trace file settings information. |
trace-control | Can modify trace file settings information. |
view | Can view current values and statistics. |
view-configuration | Can view all configuration information (not including secrets). |
Sample Output
show cli authorization
user@host> show cli authorization Current user: 'remote' login: 'user' class ''
Permissions:
admin -- Can view user accounts
admin-control-- Can modify user accounts
clear -- Can clear learned network information
configure -- Can enter configuration mode
control -- Can modify any configuration
edit -- Can edit full files
field -- Special for field (debug) support
floppy -- Can read and write from the floppy
interface -- Can view interface configuration
interface-control-- Can modify interface configuration
network -- Can access the network
reset -- Can reset/restart interfaces and daemons
routing -- Can view routing configuration
routing-control-- Can modify routing configuration
shell -- Can start a local shell
snmp -- Can view SNMP configuration
snmp-control-- Can modify SNMP configuration
system -- Can view system configuration
system-control-- Can modify system configuration
trace -- Can view trace file settings
trace-control-- Can modify trace file settings
view -- Can view current values and statistics
maintenance -- Can become the super-user
firewall -- Can view firewall configuration
firewall-control-- Can modify firewall configuration
secret -- Can view secret configuration
secret-control-- Can modify secret configuration
rollback -- Can rollback to previous configurations
security -- Can view security configuration
security-control-- Can modify security configuration
access -- Can view access configuration
access-control-- Can modify access configuration
view-configuration-- Can view all configuration (not including secrets)
flow-tap -- Can view flow-tap configuration
flow-tap-control-- Can configure flow-tap service
Individual command authorization:
Allow regular expression: none
Deny regular expression: none
Allow configuration regular expression: none
Deny configuration regular expression: none
