...

The capabilities of command authorization are much more coarse than ACM. For example, when loading a configuration using the "load" command, ACM is able to authorize all of the actual configuration being loaded. Command authorization on the other hand will simply authorize "load <file>". Therefore when command authorization is enabled and a user is permitted to run "load", we are implicitly saying that the user is allowed to change any configuration on the system.

Accounting

To enable command accounting for all users issue the following configuration command:

...