Contents

1   Introduction

This document describes how to change a custom rule.

The administrator can change custom rules when the earlier defined custom rules need to be modified because of changes in the organization authorization policy

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has the System Security Administrator role.
• A CustomRule Managed Object (MO) exists.
• The applicable model elements and permission types are known and reflect the wanted authorization policy.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

2   Procedure

To change a custom rule:

1. Navigate to the CustomRule MO, for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthorizationMethod=1,CustomRule=Custom_FaultManagement_1

2. View the current settings:

   (CustomRule=Custom_FaultManagement_1)>show -v

   The following is an example output:

   CustomRule=Custom_FaultManagement_1 permission=R ruleData="ManagedElement,SystemFunctions,Fm,*" userLabel="R Rule for FM"

   In this example, the user has read access to the Fm MO, its attributes, actions, and child MOs.

3. Enter Config mode:

   (CustomRule=Custom_FaultManagement_1)>configure

4. Change the permission or the scope of the rule, or both, for example:
   • (CustomRule=Custom_FaultManagement_1)>permission=RWX
   • (CustomRule=Custom_FaultManagement_1)>ruleData="ManagedElement,SystemFunctions,Fm"

   In this example, the user has read, write, and execution access to the Fm MO, its attributes and actions.

5. Change the description of the CustomRule MO based on the changes, for example:

   (config-CustomRule=Custom_FaultManagement_1)>userLabel="RWX Rule for FM"

6. Commit the settings:

   (config-CustomRule=Custom_FaultManagement_1)>commit

7. Verify the result:

   (CustomRule=Custom_FaultManagement_1)>show

   The following is an example output:

   CustomRule=Custom_FaultManagement_1 permission=RWX ruleData="ManagedElement,SystemFunctions,Fm" userLabel="RWX Rule for FM"

8. The custom roles associated to this custom rule are updated. The authorization policies of those users that possess the changed role are updated.