Cisco Systems Cisco IOS XR manual Creating and Modifying User Accounts and User Groups

Chapter 5 Configuring Additional Router Features

Creating and Modifying User Accounts and User Groups

Creating and Modifying User Accounts and User Groups

In the Cisco IOS XR software, users are assigned individual usernames and passwords. Each username is assigned to one or more user groups, each of which defines display and configuration commands the user is authorized to execute. This authorization is enabled by default in the Cisco IOS XR software, and each user must log in to the system using a unique username and password.

The following sections describe the basic commands used to configure users and user groups. For a summary of user accounts, user groups, and task IDs, see the “User Access Privileges” section on page 4-13.

•Displaying Details About User Accounts, User Groups, and Task IDs, page 5-13

•Configuring User Accounts, page 5-14

Note The management of user accounts, user groups, and task IDs is part of the “AAA” feature in the Cisco IOS XR software. AAA stands for “authentication, authorization, and accounting,” a suite of security features included in the Cisco IOS XR software. For more information on the AAA concepts and configuration tasks, see Cisco IOS XR System Security Configuration Guide and Cisco IOS XR System Security Command Reference. For instructions to activate software packages, see Cisco IOS XR System Management Configuration Guide, Release 3.4.

Displaying Details About User Accounts, User Groups, and Task IDs

Table 5-3summarizes the EXEC mode commands used to display details about user accounts, user groups, and task IDs.

Table 5-3	Commands to Display Details About Users and User Groups
Command		Description
show aaa userdb username		Displays the task IDs and privileges assigned to a specific username. To display
		all users on the system, enter the command without a username.
show aaa usergroup usergroup-name		Displays the task IDs and privileges that belong to a user group. To display all
		groups on the system, enter the command without a group name.
show task supported		Displays all task IDs for the system. Only the root-system users, root-lr users, or
		users associated with the WRITE:AAA task ID can configure task groups.

	Cisco IOS XR Getting Started Guide
OL-10957-02		5-13