Cisco Systems Cisco IOS XR Creating and Modifying User Accounts and User Groups

5-13
Cisco IOS XR Getting Started Guide
OL-10957-02
Chapter5 Configuring Additiona l Router Features
Creating and Modifying User Accounts and User Groups
Creating and Modifying User Accounts and User Groups
In the Cisco IOS XR software, users are assigned individual userna mes and passwords. Each username
is assigned to one or more user groups, each of which defines display and configuration commands the
user is authorized to execute. This authorization is enabled by default in the CiscoIOS XR software, and
each user must log in to the system using a unique username and password.
The following sections describe the basic commands used to configur e users and user groups. For a
summary of user accounts, user groups, and task IDs, see the “User Access Privileges” section on
page 4-13.
•Displaying Details About User Accounts, User Groups, and Task IDs, page 5-13
•Configuring User Accounts, page 5-14
Note The management of user accounts, user groups, and task IDs is part of the “AAA” feature in the
Cisco IOS XR software. AAA stands for “authentication, authorization, and accounting,” a suit e of
security features included in the CiscoIOS XR software. For more information on the AAA concepts
and configuration tasks, see Cisco IOS XR System Security Configuration Guide and Cisco IOS XR
System Security Command Reference. For instructions to activate software packages, see Cisco IOS XR
System Management Configuration Guide, Release 3.4.
Displaying Details About User Accounts, User Groups, and Task IDs
Table 5 -3 summarizes the EXEC mode commands used to display details about user accounts, user
groups, and task IDs.
Table5-3 Commands to Display Details About Users and User Groups
Command Description
show aaa userdb username Displays the task IDs and privileges assigned to a specific username. To display
all users on the system, enter the command without a username.
show aaa usergroup usergroup-name Displays the task IDs and privileges that belong to a user group. To display all
groups on the system, enter the command without a group name.
show task supported Displays all task IDs for the system. Only the root-system users, root-lr users, or
users associated with the WRITE:AAA task ID can configure task groups.