From the course: Cisco CCNP SCOR Security (350-701) Cert Prep: 1 Security Concepts and Network Security

Unlock this course with a free trial

Join today to access over 22,700 courses taught by industry experts.

Role-based CLI access

Role-based CLI access

- [Narrator] Another option we have within Cisco IOS is role-based CLI access. This is a way to add a bit more flexibility than privilege levels allow. And essentially what this does is it allows an administrator to define different views of Cisco IOS configurations for different users. It also defines the CLI commands that each user has access to in those views. These views are commonly referred to as CLI views or parser views in Cisco documentation. The default view is known as the root parser view. And the root view has access to everything. Under this view, a user can see and do anything without any restrictions. And so configuring other additional parser views, has to be done from the root view. Let's look at an example configuration here on a Cisco router, and the first thing we're going to need to make sure is that AAA is enabled on our device. Otherwise, if we try to say, for example enable view routes, we get a message letting us know that AAA must be configured. So let's go…

Contents