Forum Discussion

Raynewalk's avatar
Raynewalk
Icon for Nimbostratus rankNimbostratus
Oct 19, 2016

Guest access via CLI which TMOS commands can be executed

I have created a Guest account with TMSH access. I have the following list of commands available:-

 

Can anyone tell me if the commands to change configuration such as 'create' 'delete' 'edit' would work or not be permitted if attempted. I do not want them to work as this user will be exposed to an external supplier tool, which needs configuraton information but expressly should not be allowed to make any changes.

 

I realise I could try to create or delete something but I do not have a test system and unlikely to get the opportunity to try this.

 

Thanks

 

security
TMOS
TMSH

1 Reply

Sort By
  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Oct 19, 2016

    Dont worry about that..

    Guest user won't be able to create/modify/delete any configurations either in GUI or in CLI.

    guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos)
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos)
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm ?
Modules:
  profile  Virtual server profile configuration
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile ?
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile ?
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile ?
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile myprofile ?
Syntax Error: "myprofile" unexpected argument
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos) create ltm profile
Syntax Error: incomplete command
guest_user@(big_ip)(cfg-sync In Sync)(/S1-green-P:Active)(/my_partition)(tmos)

    -Jinshu