Changing the administrator level on the USG6000

37

Change the administrator level on the USG6000 as follows:

HRP_Asystem-view
Enter system view, return user view with Ctrl+Z.
HRP_A[USG6600-1]aaa
HRP_A[USG6600-1-aaa]manager-user admin
HRP_A[USG6600-1-aaa-manager-user-admin]level ?
INTEGER<0-15> Value
//Select a level ranging from 0 to 15 here.
HRP_A[USG6600-1-aaa-manager-user-admin]level 15
//This command indicates setting the permission of the admin account to level 15.//

Other related questions:
Viewing the administrator level on the USG6000
View the administrator level on the USG6000 as follows: [USG6600]display manager-user username admin 17:47:00 2015/04/21 ---------------------------------------------------------------------------- Username : admin Password : **************** State : Active Service-type : web ftp telnet terminal ssh ACL-number : - Access-limit : No Online-number : 1 User-level : 15 FTP-directory : hda1: Ssh authentication: any Ssh service : stelnet Ssh RSA-key : -

Changing the administrator level on the USG2000&5000
Change the administrator level on the USG2000&5000 as follows: system-view Enter system view, return user view with Ctrl+Z. [USG5100]aaa [USG5100-aaa]local-user admin level ? INTEGER<0-15> Value audit Audit level //The level available ranges from 0 to 15. In normal cases, the administrator permission of level 3 is proper. The audit level indicates the permission of auditing the administrator.// [USG5100-aaa]local-user admin level 3 //Indicates setting the permission of the admin account to the level-3 management level.//

Functions of administrator roles and levels of the USG6000 series
The USG6000 series controls administrator permissions by administrator role and level as follows: - Bind an administrator role: Control administrator permissions based on the menu of the web UI, which mainly applies to web administrators. On the web UI, choose System > Administrator > Administrator, create an administrator, and specify a role for it. Administrators with different roles have different operation permissions. - Specify an administrator level: Control administrator permissions based on the levels of administrator-executable commands, which mainly applies to CLI administrators. The following example is provided for you to set the permission level for an administrator account. # Set the permission of the administrator abc to level 3. system-view [sysname] aaa [sysname-aaa] manager-user abc [sysname-aaa-manager-user-abc] level 3 The administrator role has a higher priority than the administrator level, that is, if an administrator is bound to a role, the level specification no longer takes effect. Even if an administrator account is not bound to a specific role, the administrator role and level have a default mapping as follows: - 1: Monitoring level corresponds to the configuration administrator (monitoring). - 2: Configuration level corresponds to the configuration administrator. - 3: Management level to the 15th level correspond to the system administrator. For more details, see the administrator chapter in the product documentation of the USG6000 series.

Changing the administrator level under the VTY interface of the USG2000&5000&6000
Change the administrator level under the VTY interface of the USG2000&5000&6000 as follows: system-view Enter system view, return user view with Ctrl+Z. [USG5100]user-interface vty 0 4 [USG5100-ui-vty0-4]user privilege level ? INTEGER<0-15> Specify privilege level //Select a level ranging from 0 to 15 here. [USG5100-ui-vty0-4]user privilege level 15 //This command indicates setting the permission of the admin account to level 15.//

Administrator user name and password change for the USG6000 series
For firewalls, once an administrator account is created, the user name cannot be modified. You can run the current-user password-modify command to change the password of the current administrator.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top