Configuring Privilege Levels
Setting account access level privileges
The Set TacPriv Access command sets the access level privileges for a account. The Sentry
has four defined access privilege levels; Admin, User, On-Only and View-Only. For more information
on user access levels, see
Changing a user’s access privilege level:
To set the access level privilege for a account :
At the Sentry: prompt, type
set tacpriv access
, followed by
admin
,
user
,
ononly
or
viewonly,
optionally followed by a account number and press
Enter
.
Examples
The following command sets the account access level for account 14 to Admin:
Sentry: set tacpriv access admin 14<Enter>
The following command sets the account access level for account 5 to User:
Sentry: set tacpriv access user 5<Enter>
Granting and removing input status viewing privileges
The Set TacPriv Envmon command grants or removes input status viewing privileges to/from a
account.
To grant or remove input status viewing privileges for a account:
At the Sentry: prompt, type
set tacpriv envmon
, followed by
on
or
off
, optionally followed by a
account number and press
Enter
.
Example
The following command grants input status viewing privileges to the account 5:
Sentry: set tacpriv envmon on 5<Enter>
Displaying the access privilege levels
The List TacPrivs command displays all accounts with their access privilege levels.
To display account access privilege levels:
At the Sentry: prompt, type
list tacprivs
and press
Enter
.
Example
The following command displays all account with their access privilege level:
Sentry: list tacprivs<Enter>
TACACS Access Environmental
Account Name Level Monitoring
TACAdmin Admin Allowed
PowerUser User Allowed
User On-Only Not Allowed
Guest View-Only Not Allowed
Adding outlet access to a account
The Add OutletToTACACS command grants a account access to one or all outlets. To
grant access for more than one outlet, but not all outlets, you must use multiple Add OutletToTACACS
commands.
To grant outlet access to a account:
At the Sentry: prompt, type
add outlettotacacs
, optionally followed by an outlet name and a
account number. Press
Enter
, or
Type
add outlettotacacs all
, followed by a account number and press
Enter
.
Examples
The following commands grant the a account 5 access to outlets A1 and Webserver_1:
Sentry:add outlettotacacs .a1 5<Enter>
Sentry:add outlettotacacs WebServer_1 5<Enter>
Sentry PT22
Advanced Operations
•
65
Installation and Operations Manual
Summary of Contents for Sentry PT22
Page 44: ......