close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show cli authorization

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
show cli authorization 

Description

Display the permissions for the current user.

Options

This command has no options.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show cli authorization command. In the table, all possible permissions are displayed and output fields are listed in alphabetical order.

Table 1: show cli authorization Output Fields
Field Name	Field Description
`access`	Can view access configuration information.
`access-control`	Can modify access configuration.
`admin`	Can view user account information.
`admin-control`	Can modify user account information.
`clear`	Can clear learned network information.
`configure`	Can enter configuration mode.
`control`	Can modify any configuration.
`edit`	Can edit configuration files.
`field`	Reserved for field (debugging) support.
`firewall`	Can view firewall configuration information.
`firewall-control`	Can modify firewall configuration information.
`floppy`	Can read from and write to removable media.
`flow-tap`	Can view flow-tap configuration information.
`flow-tap-control`	Can configure flow-tap configuration information.
`idp-profiler-operation`	Can configure Profiler data.
`interface`	Can view interface configuration information.
`interface-control`	Can modify interface configuration information.
`maintenance`	Can perform system maintenance.
`network`	Can access the network by entering the `ping`, `ssh`, `telnet`, and `traceroute` commands.
`pgcp-session-mirroring`	Can view Packet Gateway Control Protocol session mirroring configuration.
`pgcp-session-mirroring-control`	Can modify Packet Gateway Control Protocol session mirroring configuration all-control.
`reset`	Can reset or restart interfaces and system processes.
`rollback`	Can roll back to previous configurations.
`routing`	Can view routing configuration information.
`routing-control`	Can modify routing configuration information.
`secret`	Can view passwords and authentication keys in the configuration.
`secret-control`	Can modify passwords and authentication keys in the configuration.
`security`	Can view security configuration information.
`security-control`	Can modify security configuration information.
`shell`	Can start a local shell.
`snmp`	Can view SNMP configuration information.
`snmp-control`	Can modify SNMP configuration information.
`system`	Can view system configuration information.
`system-control`	Can modify system configuration information.
`trace`	Can view trace file settings information.
`trace-control`	Can modify trace file settings information.
`view`	Can view current values and statistics.
`view-configuration`	Can view all configuration information (not including secrets).

Sample Output

show cli authorization

content_copy zoom_out_map
user@host> show cli authorization              
Current user: 'remote' login: 'user' class ''
Permissions:
    admin       -- Can view user accounts
    admin-control-- Can modify user accounts
    clear       -- Can clear learned network information
    configure   -- Can enter configuration mode
    control     -- Can modify any configuration
    edit        -- Can edit full files
    field       -- Special for field (debug) support
    floppy      -- Can read and write from the floppy
    interface   -- Can view interface configuration
    interface-control-- Can modify interface configuration
    network     -- Can access the network
    reset       -- Can reset/restart interfaces and daemons
    routing     -- Can view routing configuration
    routing-control-- Can modify routing configuration
    shell       -- Can start a local shell
    snmp        -- Can view SNMP configuration
    snmp-control-- Can modify SNMP configuration
    system      -- Can view system configuration
    system-control-- Can modify system configuration
    trace       -- Can view trace file settings
    trace-control-- Can modify trace file settings
    view        -- Can view current values and statistics
    maintenance -- Can become the super-user
    firewall    -- Can view firewall configuration
    firewall-control-- Can modify firewall configuration
    secret      -- Can view secret configuration
    secret-control-- Can modify secret configuration
    rollback    -- Can rollback to previous configurations
    security    -- Can view security configuration
    security-control-- Can modify security configuration
    access      -- Can view access configuration
    access-control-- Can modify access configuration
    view-configuration-- Can view all configuration (not including secrets)
    flow-tap    -- Can view flow-tap configuration
    flow-tap-control-- Can configure flow-tap service
Individual command authorization:
    Allow regular expression: none
    Deny regular expression: none
    Allow configuration regular expression: none
    Deny configuration regular expression: none

Release Information

Command introduced before Junos OS Release 7.4.

arrow_backward PREVIOUS show cli

NEXT arrow_forward show cli directory

Junos CLI Reference

ON THIS PAGE

show cli authorization

Syntax

Description

Options

Required Privilege Level

Output Fields

Sample Output

show cli authorization

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry