Task-based Authorization

Task-based authorization allows users to have different permission levels (read, write, execute, debug) at a per-component level. Task-based authorization uses the concept of components/tasks to define permission for commands for a given user.

Users are assigned to User Groups that are, in turn, associated with Task Groups. Each Task Group is then associated with one or more tasks/components. This release supports the AAA, BGP (Border Gateway Protocol) and OSPF (Open Shortest Path First) components. Also, this feature is supported only for users who are authenticated locally via the CLI interface.