Specifications

8-14
Cisco Unity Express Voice-Mail and Auto-Attendant CLI Administrator Guide for 3.0 and Later Versions
OL-14010-09
Chapter 8 Configuring Authentication, Authorization, and Accounting
Configuring Privileges
se-10-0-0-0(config)# privilege guardian-privilege member manage-passwords
se-10-0-0-0(config)# privilege guardian-privilege operation security.access
se-10-0-0-0(config)# privilege guardian-privilege operation security.aaa
se-10-0-0-0(config)# privilege guardian-privilege operation security.password
se-10-0-0-0(config)# privilege guardian-privilege operation security.pin
se-10-0-0-0(config)# privilege guardian-privilege operation system.debug
se-10-0-0-0(config)# privilege guardian-privilege operation system.view
Note You do not have to configure a privilege for the PASSWORD RESET security level because you
can use the predefined privilege manage-passwords.
• Use the following commands to create a new group called password-reset and assign the privilege
called manage-passwords to it:
se-10-0-0-0(config)# groupname password-reset create
se-10-0-0-0(config)# groupname password-reset privilege manage-passwords
• Use the following commands to create a new group called system-guardian and assign the privilege
called guardian-privilege:
se-10-0-0-0(config)# groupname system-guardian create
se-10-0-0-0(config)# groupname system-guardian privilege guardian-privilege
• Assign the appropriate users to the new groups, associating them with their roles. For example, if
you want Bob and Ned to have the privileges of the PASSWORD RESET security administration
level and Ann to have the privileges of the SYSTEM GUARDIAN security administration level, use
the following commands:
se-10-0-0-0(config)# groupname password-reset member bob
se-10-0-0-0(config)# groupname password-reset member ned
se-10-0-0-0(config)# groupname system-guardian member ann
• The configuration of this example is now complete. You can verify your configuration using the
following commands.
The following is sample output from the show group detail groupname password-reset expanded
command:
se-10-0-0-0# show group detail groupname password-reset expanded
Groupname: password-reset
Full Name: password-reset
Description:
Email:
Epage:
Group Members: <none>
User Members: bob ned
Group Owners: <none>
User Owners: <none>
Privileges: manage-passwords
The following is sample output from the show group detail groupname system-guardian
expanded command:
se-10-0-0-0# show group detail groupname system-guardian expanded
Groupname: system-guardian
Full Name: system-guardian
Description:
Email:
Epage:
Group Members: <none>