Creating Accounts for Different Access Levels

Use the following procedure to create accounts for different access levels in enhanced secure mode. You must be the administrator to configure the different access levels.

Before you begin

  • You must enable enhanced secure mode in either the JITC or non-JITC sub-modes. As a best practice, use the non-JITC sub-mode because the JITC sub-mode is more restrictive and prevents the use of some troubleshooting utilities.

Procedure

  1. Enter Global Configuration mode:

    enable

    configure terminal

  2. Create accounts on the switch for different access levels:

    password create–user {auditor|operator|privilege|security} WORD<1–255>

  3. Save the configuration:

    save config

    Note

    Note

    The save config command saves the configuration file with the filename configured as the primary configuration filename in boot config. Use the command show boot config choice to view the current primary and backup configuration filenames.

Example

Create an account at the auditor level for jsmith:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#password create-user auditor jsmith
Switch:1(config)#save config

Variable definitions

Use the data in the following table to use the password create-user command.

Variable

Value

{auditor|operator|privilege|security}

Specifies the access level for the user.

WORD<1–255>

Specifies the user name.