system

Function

The system command grants a specific administrator role permission for one or multiple functions in the system configuration module.

The undo system command restores the default permission.

system { none | read-only | read-write } [ feature-name | other ]

undo system [ feature-name ]

Parameter	Description	Value
feature-name	Specifies the function name.	You can specify one or multiple functions.
other	The value other in the system indicates the LACP module, ARP module, Keychain module, TWAMP module, IPv6 protocol stack, file system management module, and MPAC module.	-
none	Grants no permission.	-
read-only	Allows an administrator to only query the configuration.	-
read-write	Allows an administrator to both query and configure functions.	-

Role view

2: Configuration level

Only the default role system-admin has the Read-write permission to the configurations of the FW.

# Grant an administrator role named newadmin no permission for the configuration sub-modules.

<sysname> system-view
[sysname] aaa
[sysname-aaa] role newadmin
[sysname-aaa-role-newadmin] system none configuration