Support Center > Search Results > SecureKnowledge Details
Output of Clish command "show configuration rba" shows that "readonly" roles have "readwrite" features
Symptoms
  • Output of Clish command "show configuration rba" shows that "readonly" roles have "readwrite" features.

  • Output of Expert command "grep roles /config/active" shows that roles only have the defined "readonly" features.

  • Example:

    1. Create the following RBA roles in the given order (names of features are given for Gaia Portal):

      1. Test1 - 'Read Only' - Route Aggregation
      2. Test2 - 'Read Only' - ARP
      3. Test3 - 'Read / Write' - System Asset
      4. Test4 - 'Read Only' - Backup


    2. Output of the Clish command 'show configuration rba' would show that role "Test4" has "readwrite" features:

      add rba role Test1 domain-type System readonly-features aggregate
      add rba role Test2 domain-type System readonly-features arp
      add rba role Test3 domain-type System readwrite-features asset readonly-features
      arp
      add rba role Test4 domain-type System readwrite-features asset readonly-features
      backup
      
    3. Output of the Expert command 'grep "role:Test" /config/active | grep feature' would show only the expected features:

      mrma:roles:role:Test4:ro:feature:defaultRO t
      mrma:roles:role:Test4:ro:feature:backup t
      mrma:roles:role:Test3:ro:feature:defaultRO t
      mrma:roles:role:Test3:rw:feature:defaultRW t
      mrma:roles:role:Test3:rw:feature:asset t
      mrma:roles:role:Test2:ro:feature:defaultRO t
      mrma:roles:role:Test2:ro:feature:arp t
      mrma:roles:role:Test1:ro:feature:defaultRO t
      mrma:roles:role:Test1:ro:feature:aggregate t
      
Cause

Cosmetic issue in the Clish command 'show configuration'.


Solution
Note: To view this solution you need to Sign In .