object(Role view)

Function

The object command grants a specific administrator role permission for one or multiple functions in the object configuration module.

The undo object command restores the default permission for one or multiple functions in the object configuration module.

object { none | read-only | read-write } [ feature-name ]

undo object [ feature-name ]

Parameter	Description	Value
feature-name	Specifies the function name.	You can specify one or multiple functions.
none	Grants no permission.	-
read-only	Allows an administrator to only query the configuration.	-
read-write	Allows an administrator to both query and configure functions.	-

Role view

2: Configuration level

By default, a new created role is granted read-write permission.

# Grant an administrator role named newadmin the read-only permission for the service functions in the object configuration module.

<sysname> system-view
[sysname] aaa
[sysname-aaa] role newadmin
[sysname-aaa-role-newadmin] object read-only service