The following table is an overview of all function rights that are configurable for administrator accounts. The availability of individual function rights may vary, depending on the features of the device. If you wish to set the function rights at the CLI or with a script, you can optionally use the hexadecimal notation of the respective right instead of the plain text name. Learn more about this in section Hexadecimal combination of privileges on the CLI.
| Description: [1]LANconfig, [2]Setup menu | Hex notation on the CLI | Rights description |
|---|---|---|
|
0x00000400 | Wizard for assigning WLAN profiles |
|
0x00040000 | Wizard for setting up the content filter |
|
0x00004000 | Wizard for configuring dynamic DNS |
|
0x00000040 | Setting the date and time (also applies for Telnet and TFTP) |
|
0x00000001 | Wizard for the Basic Settings |
|
0x00000004 | Wizard for setting up the Internet connection |
|
0x00000020 | Wizard for connecting two local area networks (VPN) |
|
0x00000800 | Wizard for creating Public Spot user accounts* |
|
0x00100000 | Wizard for managing Public Spot user accounts* |
|
0x00200000 | Wizard for setting up a Public Spot |
|
0x00080000 | Access to the XML interface of the Public Spot module Note: A "normal" Public Spot administrator does not require this right. This right is intended for the implementation of complex authentication scenarios, such as when an external gateway (e.g. a machine or a program such as a Web server, script, etc.) needs to communicate with the module.
|
|
0x00000010 | Wizard for setting up dial-in access (RAS, VPN) |
|
0x00002000 | Wizard for rollout scenarios* |
|
0x00000002 | Wizard for adjusting the security settings |
|
0x400000 | Sends SMS text messages via the 3G/4G WWAN module in the device. |
|
0x00020000 | Establishes an SSH/Telnet connection from your device to other LCOS devices or SSH/Telnet servers |
|
0x00000080 | Search for other devices in local and remote networks* |
|
0x800000 | Wizard for setting up access to your VoIP provider |
|
0x8000 | Assistant for setting up your VoIP CallManager |
|
0x00001000 | Wizard for configuring the WLAN interface |
|
0x00000100 | Runs the WLAN link tests* (also applies to Telnet) |
|
0x00010000 | Wizard for setting up a WLC profile |
|
0x1000000 | Creates profiles for the CA web interface |
*) The permissions for and/or the execution of these Wizards or features relates exclusively to WEBconfig—unless otherwise stated. The Wizard or feature is either only available there (e.g. setting up and managing Public Spot users) or can only be constrained there (e.g. searching for devices).
Hexadecimal combination of privileges on the CLI
It can be a highly laborious process to configure multiple privileges by using plain text names in scripts. An alternative is to use the hex values instead of the names, to combine these values into a total, and to incorporate them into your script command.
The sum of several hex values results from the hexadecimal addition of the 1st, 2nd, 3rd ... nth position from the right. If, for example, the user should be able to execute features such as the Security Wizard, Provider Selection, RAS Wizard, Time Setting and the WLAN link test,, the sum of the individual hex values is calculated as follows:
- 1st position from the right: 2 (Security-Wizard) + 8 (Provider-Selection) = a
- 2nd position from the right: 1 (RAS-Wizard) + 4 (Time-Setting) = 5
- 3rd position from the right: 1 (WLAN-Linktest) = 1
For this example, the privileges have the value 0x0000015a. Put differently, this is an OR operator with the following hexadecimal values:
| Name on the CLI | Value |
|---|---|
| Security Wizard | 0x00000002 |
| Provider-Selection | 0x00000008 |
| RAS Wizard | 0x00000010 |
| Time setting | 0x00000040 |
| WLAN link test | 0x00000100 |
| OR operated | 0x0000015a |
Configuration example on the CLI
The following command (in the abbreviated form) sets up a new user in the Admins table (in the Setup menu under ) who, as local administrator NetAdmin with the password BW46zG29, is able to select the Internet provider. The user will be activated immediately:
set NetAdmin BW46zG29 yes Admin-RW 8
The following command extends the privileges so that the user NetAdmin is able to execute the WLAN link test. The asterisks in the command stand for the values that remain unchanged:
set NetAdmin * * * 108
