Download Junos® OS CLI User Guide

Chapter 13: Junos OS CLI Environment Commands
show cli authorization
Syntax
Release Information
Description
show cli authorization
Command introduced before Junos OS Release 7.4.
Display the permissions for the current user.
user@host> show cli authorization
Current user: 'root' login: ‘boojum’ class '(root)'
Permissions:
Permissions:
admin
-- Can view user accounts
admin-control-- Can modify user accounts
clear
-- Can clear learned network info
configure
-- Can enter configuration mode
control
-- Can modify any config
edit
-- Can edit full files
field
-- Can use field debug commands
floppy
-- Can read and write the floppy
interface
-- Can view interface configuration
interface-control-- Can modify interface configuration
network
-- Can access the network
reset
-- Can reset/restart interfaces and daemons
routing
-- Can view routing configuration
routing-control-- Can modify routing configuration
shell
-- Can start a local shell
snmp
-- Can view SNMP configuration
snmp-control-- Can modify SNMP configuration
system
-- Can view system configuration
system-control-- Can modify system configuration
trace
-- Can view trace file settings
trace-control-- Can modify trace file settings
view
-- Can view current values and statistics
maintenance -- Can become the super-user
firewall
-- Can view firewall configuration
firewall-control-- Can modify firewall configuration
secret
-- Can view secret statements
secret-control-- Can modify secret statements
rollback
-- Can rollback to previous configurations
security
-- Can view security configuration
security-control-- Can modify security configuration
access
-- Can view access configuration
access-control-- Can modify access configuration
view-configuration-- Can view all configuration (not including secrets)
flow-tap
-- Can view flow-tap configuration
flow-tap-control-- Can modify flow-tap configuration
idp-profiler-operation-- Can Profiler data
pgcp-session-mirroring-- Can view pgcp session mirroring configuration
pgcp-session-mirroring-control-- Can modify pgcp session mirroring
configuration
storage
-- Can view fibre channel storage protocol configuration
storage-control-- Can modify fibre channel storage protocol configuration
all-control -- Can modify any configuration
Required Privilege
Level
view
Copyright © 2015, Juniper Networks, Inc.
319