You can configure Huawei-NACM authorization to authorize specific users to perform NETCONF operations or access NETCONF resources. This ensures device security.
After a NETCONF connection is established using SSH, all SSH users can use NETCONF to manage devices, imposing security risks. To resolve this problem, you can configure NETCONF authorization rules to authorize specific users to perform NETCONF operations or access NETCONF resources.
The system view is displayed.
The AAA view is displayed.
A task group is created, and the task group view is displayed.
A NETCONF authorization rule for operations and data nodes is configured, and the task is added to the task group.
Return to the AAA view.
A local user is added to the user group.
The configuration is committed.