Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
inherit usergroup
SR-29
Cisco IOS XR System Security Command Reference
inherit usergroup
To enable a user group to derive characteristics of another user group, use the inherit usergroup
command in user group configuration mode.
inherit usergroup usergroup-name
Syntax Description
Defaults No default behavior or values
Command Modes User group configuration
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Each user group is associated with a set of task groups applicable to the users in that group. A task group
is defined by a collection of task IDs. Task groups contain task ID lists for each class of action. The task
permissions for a user are derived (at the start of the EXEC or XML session) from the task groups
associated with the user groups to which that user belongs.
User groups support inheritance from other user groups. Use the inherit usergroup command to copy
permissions (task ID attributes) from one user group to another user group. The “destination” user group
inherits the properties of the inherited group and forms a union of all task IDs specified in those groups.
For example, when user group A inherits user group B, the task map of the user group A is a union of
that of A and B. Cyclic inclusions are detected and rejected. User groups cannot inherit properties from
predefined groups, such as root-system users, root-sdr users, netadmin users, and so on. Any changes
made to the usergroup from which it is inherited are reflected immediately in the group from which it is
inherited.
Task ID
usergroup-name Name of the user group from which permissions are to be inherited.
Release Modification
Release 2.0 This command was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 This command was supported on the Cisco XR 12000 Series Router.
Release 3.3.0 No modification.
Task ID Operations
aaa read, write