policy (role view)

Function

The policy command grants a specific administrator role permission for one or multiple functions in the policy configuration module.

The undo policy command restores the default permission for one or multiple functions in the policy configuration module.

policy { none | read-only | read-write } [ feature-name ]

undo policy [ feature-name ]

Parameter	Description	Value
feature-name	Specifies the function name.	You can specify one or multiple functions.
none	Grants no permission.	-
read-only	Allows an administrator to only query the configuration.	-
read-write	Allows an administrator to both query and configure functions.	-

Role view

2: Configuration level

By default, a new role is granted read-write permission.

# Grant an administrator role named newadmin the read-only permission for the shield function in the policy configuration module.

<sysname> system-view
[sysname] aaa
[sysname-aaa] role newadmin
[sysname-aaa-role-newadmin] policy read-only shield