Filter
Top Products
4-29
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 4 Setting Up the Sensor
Configuring Authentication and User Parameters
Changing User Privilege Levels
Note You cannot use the privilege command to give a user service privileges. If you want to give an existing
user service privileges, you must remove that user and then use the username command to create the
service account. There can only be one person with service privileges.
Use the privilege command to change the privilege level—administrator, operator, viewer—for a user.
To change the privilege level for a user, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Verify the current privilege of the user jsmith.
sensor# show users all
CLI ID User Privilege
* 13491 cisco administrator
jsmith viewer
operator operator
service service
viewer viewer
sensor#
Step 3 Change the privilege level from viewer to operator.
sensor# configure terminal
sensor(config)# privilege user jsmith operator
Warning: The privilege change does not apply to current CLI sessions. It will be applied
to subsequent logins.
sensor(config)#
Step 4 Verify that the privilege of the user has been changed. The privilege of the user jsmith has been changed
from
viewer to operator.
sensor(config)# exit
sensor# show users all
CLI ID User Privilege
* 13491 cisco administrator
jsmith operator
operator operator
service service
viewer viewer
sensor#
Step 5 Display your current level of privilege.
sensor# show privilege
Current privilege level is administrator
For More Information
For the procedure for creating the service account, see Creating the Service Account, page 4-26.