Rules for configuration commands

The following rules govern configuration commands:

• If a role has a rule with a read-write operation and the accept action for a configuration command, the user associated with this role can execute the command and read the configuration data.
• If a role has a rule with a read-only operation and the accept action for a configuration command, the user associated with this role can only read the configuration data of the command.
• If a role has a rule with a read-only or read-write operation and the reject action for a configuration command, the user associated with this role cannot execute the command and can read the configuration data of the command.