Cisco Unity Connection Read-only CLI April 2016 EDCS -1562255

Notice The information in this presentation is provided under Non-Disclosure agreement and should be treated as Cisco Confidential. Under no circumstances is this information to be shared further without the express consent of Cisco. Any roadmap item is subject to change at the sole discretion of Cisco, and Cisco will have no liability for delay in the delivery or failure to deliver any of the products or features set forth in this document.

Abbreviations CLI – Command Line Interface CUC – Cisco Unity Connection

Agenda Introduction Configuration Demo References

Introduction

Introduction With 11.5 and later releases, Read-only CLI feature is introduced, where an OS admin user account created with privilege level 0: Will not have permission for any write operation. Can only run CLI commands performing read operation.

About OS Admin User Account OS user accounts can be created with either: Privilege level 0: Specifies an ordinary privilege level where user can run only CLI commands assigned for level 0. Privilege level 1: Specifies an advanced privilege level where user can run CLI commands assigned for level 1 and below. Note: Prior to 11.5, the privilege level were not categorized based on read\write operation. A user with privilege level 0 could perform both read and write operation.

Configuration

Configuring a New Read-Only Admin Account admin:set account name <name> Note: Here ‘name’ represents the username for the new Read-Only admin account The command gives the following prompt: Privilege Levels are: Ordinary - Level 0      Advanced - Level 1 Please enter the privilege level : ….. Type 0 to create a read-only user with privilege level 0. Type in the password. Account gets created successfully. Note: It might happen that the first time you login via the new username and password you created, a prompt might occur which says, "Your password has expired. You must change your password now and login again!". So kindly make a new password, and after that the same prompt would not occur again.

Demo

Uses Cases for Read-Only CLI Prerequisite: OS admin user Tom is created with privilege level 0 Case 1: User Tom login (Read-only user) into CUC via CLI and executes CLI commands, Command privilege level CLI Command Accessible privilege level 0 show myself Yes show cuc version privilege level 1 set accountlocking count No set cli session timeout

Command privilege level Continued.. Prerequisite: OS admin user Adam is created with privilege level 1 Case 2: User Adam login (Privileged user) into CUC via CLI and executes CLI commands, Command privilege level CLI Command Accessible privilege level 0 show myself Yes show cuc version privilege level 1 set accountlocking count set cli session timeout

Reference Command Line Interface Guide : http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/cli_ref/11_0_1/CUCM_BK_C93262BC_00_cucm-cli-reference-guide-1101.html