Configuring user role authentication

1. Enter system view.

system-view

N/A

2. Set an authentication mode.

super authentication-mode { local | scheme } *

By default, local-only authentication applies.

3. (Optional.) Specify the default target user role for temporary user role authorization.

super default role role-name

By default, the default target user role is network-admin.

4. Set a local authentication password for a user role.

• In non-FIPS mode:super password [ role role-name ] [ { hash | simple } string ]

• In FIPS mode:super password [ role role-name ]

Use this step for local password authentication.

By default, no password is set.

If you do not specify the role role-name option, the command sets a password for the default target user role.