Huawei 8700 Switch Create 1 restricted account

funnycoffee1232026-08-19 9:12

onsite huawei 8700 switch

we need to create a read-only account for Tier 1 staff, allowing view-only access to Device with no modification permissions. Escalation to Tier 2 is not required for this access."

bash 复制代码

 local-user readuser password irreversible-cipher admin123
 
 local-user readuser privilege level 1
 
 local-user readuser service-type terminal ssh http

as above ,the privilege must be level 1 but not level 0, the level 0 has no display permissions as followings

bash 复制代码

<huawei-8700> display ip int brief
 Error: Do not have permission to run the command or the command is incomplete.

level 1 has the permission for display-related commands ， but no config permissions

bash 复制代码

<Huawei-8700> dis ip int brief 
Interface                   IP Address/Mask    Physical Protocol VPN           
MEth0/0/0/0                 unassigned         down     down     --            
NULL0                       unassigned         up       up(s)    --            
Vlanif1                     169.254.1.5/25   up       up       --            
<Huawei-8700>sys
Error: Do not have permission to run the command or the command is incomplete.