Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
usergroup
SR-95
Cisco IOS XR System Security Command Reference
usergroup
To configure a user group and associate it with a set of task groups, and to enter user group configuration
mode, use the usergroup command in global configuration mode. To delete a user group, or to delete a
task-group association with the specified user group, use the no form of this command.
usergroup usergroup-name [description string | taskgroup taskgroup-name | inherit usergroup
usergroup-name]
no usergroup usergroup-name [description string | taskgroup taskgroup-name | inherit
usergroup usergroup-name]
Syntax Description
Defaults Five predefined user groups are available by default.
Command Modes Global configuration
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
User groups are configured with the command parameters for a set of users, such as task groups. You
can remove specific user groups by using the no form of the usergroup command. You can remove the
user group itself by using the no form of the command without giving any parameters. Deleting a user
group that is still referenced in the system results in a warning and a rejection of the deletion.
Use the inherit usergroup command to copy permissions from other user groups. The user group is
inherited by the parent group and forms a union of all task IDs specified in those groups. Cyclic
inclusions are detected and rejected. User groups cannot inherit properties from predefined groups, such
as root-system and owner-sdr.
usergroup-name Name of the user group. The usergroup-name argument can be
only one word. Spaces and quotation marks are not allowed.
description string (Optional) Describes the user group.
taskgroup taskgroup-name (Optional) Associates the specified task group with the named
user group and inherits the task group permissions into this user
group.
inherit usergroup usergroup-name (Optional) Copies permissions from another user group.
Release Modification
Release 2.0 This command was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 This command was supported on the Cisco XR 12000 Series Router.
Release 3.3.0 Support was added to display all user groups in global configuration mode.