1. Cisco Unity Connection Read-only CLI
April EDCS

2. Notice
The information in this presentation is provided under Non-Disclosure agreement and should be treated as Cisco Confidential. Under no circumstances is this information to be shared further without the express consent of Cisco.
Any roadmap item is subject to change at the sole discretion of Cisco, and Cisco will have no liability for delay in the delivery or failure to deliver any of the products or features set forth in this document.

3. Abbreviations CLI – Command Line Interface
CUC – Cisco Unity Connection

4. Agenda
Introduction
Configuration
Demo
References

5. Introduction

6. Introduction
With 11.5 and later releases, Read-only CLI feature is introduced, where an OS admin user account created with privilege level 0:
Will not have permission for any write operation.
Can only run CLI commands performing read operation.

7. About OS Admin User Account
OS user accounts can be created with either:
Privilege level 0: Specifies an ordinary privilege level where user can run only CLI commands assigned for level 0.
Privilege level 1: Specifies an advanced privilege level where user can run CLI commands assigned for level 1 and below.
Note: Prior to 11.5, the privilege level were not categorized based on read\write operation. A user with privilege level 0 could perform both read and write operation.

8. Configuration

9. Configuring a New Read-Only Admin Account
admin:set account name <name>
Note: Here ‘name’ represents the username for the new
Read-Only admin account
The command gives the following prompt:
Privilege Levels are:
Ordinary - Level 0      Advanced - Level 1
Please enter the privilege level : …..
Type 0 to create a read-only user with privilege level 0.
Type in the password.
Account gets created successfully.
Note: It might happen that the first time you login via the new username and password you created, a prompt might occur which says, "Your password has expired. You must change your password now and login again!". So kindly make a new password, and after that the same prompt would not occur again.

10. Demo

11. Uses Cases for Read-Only CLI
Prerequisite: OS admin user Tom is created with privilege
level 0
Case 1: User Tom login (Read-only user) into CUC via CLI and executes CLI commands,
Command privilege level
CLI Command
Accessible
privilege level 0
show myself
Yes
show cuc version
privilege level 1
set accountlocking count No
set cli session timeout

12. Command privilege level
Continued..
Prerequisite: OS admin user Adam is created with privilege level 1
Case 2: User Adam login (Privileged user) into CUC via CLI and executes CLI commands,
Command privilege level
CLI Command
Accessible
privilege level 0
show myself
Yes
show cuc version
privilege level 1
set accountlocking count
set cli session timeout

13. Reference
Command Line Interface Guide :