Cisco Systems Cisco IOS XR User Manual
5-13
Cisco IOS XR Getting Started Guide
OL-10957-02
Chapter 5 Configuring Additional Router Features
Creating and Modifying User Accounts and User Groups
Creating and Modifying User Accounts and User Groups
In the Cisco IOS XR software, users are assigned individual usernames and passwords. Each username
is assigned to one or more user groups, each of which defines display and configuration commands the
user is authorized to execute. This authorization is enabled by default in the Cisco IOS XR software, and
each user must log in to the system using a unique username and password.
is assigned to one or more user groups, each of which defines display and configuration commands the
user is authorized to execute. This authorization is enabled by default in the Cisco IOS XR software, and
each user must log in to the system using a unique username and password.
The following sections describe the basic commands used to configure users and user groups. For a
summary of user accounts, user groups, and task IDs, see the
summary of user accounts, user groups, and task IDs, see the
•
•
Note
The management of user accounts, user groups, and task IDs is part of the “AAA” feature in the
Cisco IOS XR software. AAA stands for “authentication, authorization, and accounting,” a suite of
security features included in the Cisco IOS XR software. For more information on the AAA concepts
and configuration tasks, see Cisco IOS XR System Security Configuration Guide and Cisco IOS XR
System Security Command Reference. For instructions to activate software packages, see Cisco IOS XR
System Management Configuration Guide, Release 3.4.
Cisco IOS XR software. AAA stands for “authentication, authorization, and accounting,” a suite of
security features included in the Cisco IOS XR software. For more information on the AAA concepts
and configuration tasks, see Cisco IOS XR System Security Configuration Guide and Cisco IOS XR
System Security Command Reference. For instructions to activate software packages, see Cisco IOS XR
System Management Configuration Guide, Release 3.4.
Displaying Details About User Accounts, User Groups, and Task IDs
summarizes the EXEC mode commands used to display details about user accounts, user
groups, and task IDs.
Table 5-3
Commands to Display Details About Users and User Groups
Command Description
show aaa userdb username
Displays the task IDs and privileges assigned to a specific username. To display
all users on the system, enter the command without a username.
all users on the system, enter the command without a username.
show aaa usergroup usergroup-name
Displays the task IDs and privileges that belong to a user group. To display all
groups on the system, enter the command without a group name.
groups on the system, enter the command without a group name.
show task supported
Displays all task IDs for the system. Only the root-system users, root-lr users, or
users associated with the WRITE:AAA task ID can configure task groups.
users associated with the WRITE:AAA task ID can configure task groups.