role (AAA view)

Function

The role command creates an administrator role and displays the role view.

The undo role command deletes an administrator role.

role role-name

undo role role-name

Parameter	Description	Value
role-name	Specifies the name of an administrator role to be created.	The value is a string of 1 to 64 case-insensitive characters. The name cannot contain the following characters: pipe characters (\|), dashes (/), backward dashes (\), colons (:), asterisks (*), ampersands (&), question marks (?), commas (,), hyphens (-), equal signs (=), number signs (#), quotation marks ("), greater than symbols (<), and less than symbols (>).

AAA view

2: Configuration level

You can grant role-specific permission in the role view. If a role already exists, the role command displays the role view.

There are default roles: audit-admin, system-admin, device-admin, and device-admin (monitor).

The administrator role referenced by an administrator cannot be deleted.

# Create an administrator role named newadmin.

<sysname> system-view
[sysname] aaa
[sysname-aaa] role newadmin
[sysname-aaa-role-newadmin]