Guest

Preview Tool

Cisco Bug: CSCuj44719 - 4.3.x "show policy-map" requires cisco-support (READ) taskid

Last Modified

Mar 05, 2018

Products (8)

  • Cisco ASR 9000 Series Aggregation Services Routers
  • Cisco IOS XR Software
  • Cisco ASR 9922 Router
  • Cisco ASR 9010 Router
  • Cisco ASR 9904 Router
  • Cisco ASR 9006 Router
  • Cisco ASR 9001 Router
  • Cisco ASR 9912 Router

Known Affected Releases

4.0.4.BASE 4.3.1.BASE 4.3.2.BASE

Description (partial)

Symptom:
The "show policy-map xxx" commands apart from qos (READ) requires cisco-support (READ) now.
At least it is true for 4.3.1 and 4.3.2. 
On 4.2.x qos (READ) is enough to execute the command

As a result of it the 'netadmin' taskgroup user cannot execute this command anymore.

Conditions:
ASR9k on 4.3.x

Related Community Discussions

ASR9000/XR Using Task groups and understanding Priv levels and authorization
Introduction IOS-XR has a very strong embedded mechanism to do user authentication and authorization. While XR does not have the concept of privilege-levels as what IOS had, the embedded user task group management is extremely strong allow for the creation of different task groups. Tasks Building blocks for on-box authorization scheme 4 types of permissions per task Read Write Execute Debug Tasks aaa config-services hsrp netflow sbc acl crypto interface network snmp admin diag inventory ospf sonet-sdh ...
Latest activity: Jan 03, 2018
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.