Assigning User Roles To Local Aaa Authentication Users; Assigning User Roles To Non-Aaa Authentication Users On User Lines - HP 10500 Series Configuration Manual

Assigning user roles to local AAA authentication users

Configure user roles for local AAA authentication users in their local user accounts. Every local user has
a default user role. If this default user role is not suitable, delete it.
If a local user is the only one with the security-audit user role, this local user cannot be deleted.
The security-audit user role is mutually exclusive with other user roles.
When you assign the security-audit user role to a local user, the system requests confirmation to
•
delete all the other user roles of the local user first.
When you assign the other user roles to a local user who has been assigned the security-audit user
•
role, the system requests confirmation to delete the security-audit user role for the local user first.
To assign a user role to a local user:
Step
1. Enter system view.
2. Create a local user and
enter local user view.
3. Authorize the user to have a
user role.
Assigning user roles to non-AAA authentication users on user
lines
Specify user roles for the following two types of login users on the user lines:
Users who use password authentication or no authentication.
•
• SSH clients that use publickey or password-publickey authentication. User roles assigned to these
SSH clients are specified in their respective device management user accounts.
For more information about user lines, see "Login overview" and "Logging in to the CLI." For more
information about SSH, see Security Configuration Guide.
To assign a user role to non-AAA authentication users on a user line:
Step
1. Enter system view.
Command
system-view
local-user user-name class
{ manage | network }
authorization-attribute user-role
role-name
Command
system-view
60
Remarks
N/A
N/A
Repeat this step to assign the user to up
to 64 user roles.
By default, local users created by a
network-admin or level-15 user on the
default MDC are assigned the
network-operator user role, and local
users created by an mdc-admin or
level-15 user on a non-default MDC
are assigned the mdc-operator user
role.
Remarks
N/A