%This command is not authorized

[tenaro.gusatu.novici]

When I try to run some commands like "show netio ?" on my CRS (as a testuser that belongs to the root-system user group) I receive upper message. If I execute "show install sum" I see dozen active packages (mini, doc, diags etc). CRS is running IOS XR version 4.1.2. Any ideas why I'm receiving that message?

[Ivan Krimmel]

Hi Tenaro,

these commands are usually require 'cisco-support' group for the user to be a part of.

[dpothier]

hello Tenaro,

Most likely you will need cisco-support privileges to run the "show netio" commands.

You can use the command "describe" to see what priveleges are required.

example:

RP/0/RSP0/CPU0:PR-ASR9K-2#describe show netio drops

The command is defined in netio.parser

User needs ALL of the following taskids:

        cisco-support (READ)

regards,

David

[Ivan Krimmel]

funny thing is that being in 'root-system' group only does not allow to describe the command which requires 'cisco-support' membership:

RP/0/RSP0/CPU0:iox#describe show netio

% This command is not authorized

[Ivan Krimmel]

In reality you can do almost everything being in 'root-system', those netio counters are really hard-core debugging outputs, which are of use to a certain number of Cisco engineers and developers who actually knows their meaning. However, if you would like to do practically everything on a XR box, you go to the global config mode:

RP/0/RSP0/CPU0:iox#conf t

RP/0/RSP0/CPU0:iox(config)#username csc group cisco-support

RP/0/RSP0/CPU0:iox(config)#commit

Take care