Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


The capabilities of command authorization are much more coarse than ACM. For example, when loading a configuration using the "load" command, ACM is able to authorize all of the actual configuration being loaded. Command authorization on the other hand will simply authorize "load <file>". Therefore when command authorization is enabled and a user is permitted to run "load", we are implicitly saying that the user is allowed to change any configuration on the system.


To enable command accounting for all users issue the following configuration command: