IOS XR 64 bit conversion | Group permission Issue

[TrivialPants]

Hi All,

I have a 9006 with 880 engine that was converted to 64 bit ios xr code. After the conversion the user names are all just in the sysadmin group. 

We cant seem to adjust the permissions or roles of these users or access the admin VM with them.

What is the best method to update their permissions to the following roles:

group root-lr
group sysadmin
group root-system
group cisco-support

[Flavio Miranda]

Try this:

(config-ug)# inherit usergroup "group"

You can refer to the following doc:

https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-6/system-setup/configuration/guide/b-system-setup-cg-asr9000-66x/b-system-setup-cg-asr9000-66x_chapter_0100.html 

[TrivialPants]

(config)#usergroup
% This command is not authorized

Above is what we see when trying to perform this or most other commands.

[Flavio Miranda]

On the doc, there´s an information saying:

Only users associated with the WRITE:AAA task ID can configure user groups. User groups cannot inherit properties from predefined groups, such as owner-sdr.

Aparently this is not the case of your user.

[TrivialPants]

Thanks all for the help. I was able to initiate the ROMMON and re-enter the admin password.

I had to backup from an old config after doing this, however.