Configuring Permissions for Administrator Profiles

The permissions of administrator profiles are configured at the settings administrators profiles level.

To create an administrator profile, use the following command:

Admin@nodename# create settings administrators profiles

Provide the following parameters:

Parameter

Description

name

Administrator profile name.

description

Administrator profile description.

api-permissions

API permissions:

  • no-access: no access

  • read: read-only

  • write: read and write

You can assign rights to all or individual objects:

Admin@nodename# create settings administrators profiles ... api-permissions <permission> all

or

Admin@nodename# create settings administrators profiles ... api-permissions <permission> [ object ... ]

webui-permissions

UserGate interface permissions:

  • no-access: no access

  • read: read-only

  • write: read and write

You can assign rights to all or individual objects:

Admin@nodename# create settings administrators profiles ... webui-permissions <permission> all

or

Admin@nodename# create settings administrators profiles ... webui-permissions <permission> [ object ... ]

cli-permissions

Command line interface permissions:

  • no-access: no access

  • read: read-only

  • write: read and write

You can assign rights to all or individual objects:

Admin@nodename# create settings administrators profiles ... cli-permissions <permission> all

or

Admin@nodename# create settings administrators profiles ... cli-permissions <permission> [ object ... ]

To edit the profile, use the following command:

Admin@nodename# set settings administrators profiles <profile-name> <parameter>

The command's parameters are similar to those used for administrator profile creation.

To view information about all administrator profiles, use the following command:

Admin@nodename# show settings administrators profiles

To display information about a specific profile, use the following command:

Admin@nodename# show settings administrators profiles <profile-name>

To delete an administrator profile, use the following command:

Admin@nodename# delete settings administrators profiles <profile-name>