inherit usergroup
To enable a user group to derive characteristics of another user group, use the inherit usergroup command
in user group configuration mode.
inherit usergroup usergroup-name
Syntax Description
Name of the user group from which permissions are to be inherited.
usergroup-name
Command Default
None
Command Modes
User group configuration
Command History
ModificationRelease
This command was introduced.Release 2.0
Usage Guidelines
Each user group is associated with a set of task groups applicable to the users in that group. A task group is
defined by a collection of task IDs. Task groups contain task ID lists for each class of action. The task
permissions for a user are derived (at the start of the EXEC or XML session) from the task groups associated
with the user groups to which that user belongs.
User groups support inheritance from other user groups. Use the inherit usergroup command to copy
permissions (task ID attributes) from one user group to another user group. The “destination” user group
inherits the properties of the inherited group and forms a union of all task IDs specified in those groups. For
example, when user group A inherits user group B, the task map of the user group A is a union of that of A
and B. Cyclic inclusions are detected and rejected. User groups cannot inherit properties from predefined
groups, such as root-system users, root-sdr users, netadmin users, and so on. Any changes made to the usergroup
from which it is inherited are reflected immediately in the group from which it is inherited.
Task ID
OperationsTask ID
read, writeaaa
Examples
The following example shows how to enable the purchasing user group to inherit properties from the sales
user group:
RP/0/RP0/CPU0:router# configure
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
36 OL-24740-01
Authentication, Authorization, and Accounting Commands
inherit usergroup
To Next Page
Loading...
Need help?
General
