Reference Guide

66 | Switch Management
www.dell.com | support.dell.com
Configuring Privilege Levels
Privilege levels restrict access to commands based on user or terminal line. There are 16 privilege levels, of
which two are pre-defined. The default privilege level is 1.
• Level 1—Access to the system begins at EXEC mode, and EXEC mode commands are limited to
enable, disable, and exit.
• Level 15—Access to the system begins at EXEC Privilege mode, and all commands are available.
Creating a Custom Privilege Level
Custom privilege levels start with the default EXEC mode command set. You can then customize privilege
levels 2-14 by:
• removing commands from the EXEC mode commands
• moving commands from EXEC Privilege mode to EXEC mode
• allowing access to CONFIGURATION mode commands
• allowing access to INTERFACE, LINE, ROUTE-MAP, and ROUTER mode commands
A user can access all commands at his privilege level and below.
Removing a command from EXEC mode
Remove a command from the list of available commands in EXEC mode for a specific privilege level
using the command
privilege exec from CONFIGURATION mode. In the command, specify a level greater
than the level given to a user or terminal line, followed by the first keyword of each command to be
restricted.
Moving a command from EXEC privilege mode to EXEC mode
Move a command from EXEC Privilege to EXEC mode for a privilege level using the command privilege
exec
from CONFIGURATION mode. In the command, specify the privilege level of the user or terminal
line, and specify all keywords in the command to which you want to allow access.
Allowing Access to CONFIGURATION mode commands
Allow access to CONFIGURATION mode using the command privilege exec level level configure from
CONFIGURATION mode. A user that enters CONFIGURATION mode remains at his privilege level, and
has access to only two commands,
end and exit. You must individually specify each CONFIGURATION
mode command to which you want to allow access using the command
privilege configure level level. In the
command, specify the privilege level of the user or terminal line, and specify all keywords in the command
to which you want to allow access.