Predefined User Groups

[kozorezdi]

Hello everybody,

Please tell me, how can I check what tasks and permissions contains each predefined user group:

root-system: Root system users

root-lr: Root logical router users

netadmin: Network administrators

sysadmin: System administrators

operator: Operators performing day-to-day activities

cisco-support: highest level of privilege allowing lowest level access

I don't see it into my config:

RP/0/RSP0/CPU0:R01#show running-config taskgroup root-system

% No such configuration item(s)

RP/0/RSP0/CPU0:london01#

I can assign a user to only one group and check it like this, but I believe I can do it in more smart way...

RP/0/RSP0/CPU0:R01#sh user group   

root-system

RP/0/RSP0/CPU0:R01#

!

RP/0/RSP0/CPU0:R01#sh user tasks

Task:                  aaa  : READ    WRITE    EXECUTE    DEBUG

Task:                  acl  : READ    WRITE    EXECUTE    DEBUG

Task:                admin  : READ    WRITE    EXECUTE    DEBUG

Task:                 ancp  : READ    WRITE    EXECUTE    DEBUG

...

!

Thank you in advance,

Dmitry

[smilstea · Accepted solution]

Hi Dmitry,

You can use 'show aaa taskgroup '

HTH,

Sam

[kozorezdi]

hi Samuel,

Great!  Thank you very much!

RP/0/RSP0/CPU0:london01#sh aaa taskgroup cisco-support

Task group 'cisco-support' has the following combined set

  of task IDs (including all inherited groups):

Task:        cisco-support  : READ    WRITE    EXECUTE    DEBUG (reserved)

RP/0/RSP0/CPU0:london01#sh aaa taskgroup sysadmin     

Task group 'sysadmin' has the following combined set

  of task IDs (including all inherited groups):

Task:                  aaa  : READ                            

Task:                   acl  : READ    WRITE    EXECUTE    DEBUG

Task:                admin  : READ                            

Task:                 ancp  : READ                            

Task:                  atm  : READ  

...

--

Best regards,

Dmitry