Dell EMC SmartFabric OS10 User Guide Release 10.5.0

Configure enable password for a privilege level

1. Configure a privilege level and assign commands to it in CONFIGURATION mode.
   privilege mode priv-lvl privilege-level command-string
   • mode — Enter the privilege mode used to access CLI modes:
     • exec — Accesses EXEC mode.
     • configure — Accesses class-map, DHCP, logging, monitor, openflow, policy-map, QOS, support-assist, telemetry, CoS, Tmap, UFD, VLT, VN, VRF, WRED, and alias modes.
     • interface — Accesses Ethernet, fibre-channel, loopback, management, null, port-group, lag, breakout, range, port-channel, and VLAN modes.
     • route-map — Accesses route-map mode.
     • router — Accesses router-bgp and router-ospf modes.
     • line — Accesses line-vty mode.
   • priv-lvl privilege-level — Enter the number of a privilege level, from 2 to 14.
   • command-string — Enter the command supported at the privilege level.
   For sysadmin, netadmin, and secadmin roles, you cannot configure a privilege level less than 2 .
2. Configure an enable password for each privilege level in CONFIGURATION mode.
   enable password encryption-type password-string priv-lvl privilege-level
   • encryption-type — Enter an encryption type for the password entry:
     • 0 — Use plain text with no password encryption.
     • sha-256 — Encrypt the password using the SHA-256 algorithm.
     • sha-512 — Encrypt the password using the SHA-512 algorithm.
   • priv-lvl privilege-level — Enter a privilege level, from 1 to 15.

OS10(config)# privilege exec priv-lvl 3 "show version"
OS10(config)# enable password 0 P@$$w0Rd priv-lvl 3

OS10(config)# privilege exec priv-lvl 12 "configure terminal"
OS10(config)# privilege configure priv-lvl 12 route-map
OS10(config)# privilege route-map priv-lvl 12 "set local-preference"
OS10(config)# enable password sha-256 $5$2uThib1o$84p.tykjmz/w7j26ymoKBjrb7uepkUB priv-lvl 12