View only services configuration



  • Does anybody knows how can i give to a specific user class the rights to see configuration from services (“show configuration services”), but deny the rights to see any other configuration.

    I have tried a lot of combinations of allow-commands/deny-commands but non solved my problem. 😞

    Examples:

    permissions [ all view ];
    allow-commands “^show configuration services*”;
    deny-commands “^show configuration*”;

    permissions [ clear network reset trace view view-configuration ];
    allow-commands “^show configuration services$”;
    deny-commands “(^show configuration system*)|(^show configuration snmp*)”; #still able to see the system/snmp config



  • not to forget, M120 /  10.4S12.2


 

34
Online

38.4k
Users

12.7k
Topics

44.5k
Posts