Configuring a placeholder rule

A rule created with the no-operation command does not enforce any authorization rules. Instead, you can use the no-operation instance as a placeholder for a valid command that is added later, as shown in the following example.

  1. In privileged EXEC mode, use the configure terminal command to enter global configuration mode.
    device# configure terminal
    
  2. Enter the rule command with the specified parameters and the no-operation keyword as a placeholder.
    device(config)# rule 75 action reject operation read-write role NetworkAdmin command no-operation
    
  3. Enter the rule command with the specified command to replace the placeholder.
    device(config)# rule 75 role NetworkAdmin command firmware