AAA User Remove Role

The remove role allows an admin user to modify a user’s account by removing a role from that user.

System AAA User Remove Role Attributes

Attribute	Value	Default	Req	Description
remove-role		N/A		Action to remove a role from a user.
Input				AAA Actions input parameters
Username	String	N/A	Y	The username of the user to be removed. Username must be a printable string.
role	Admin Maintenance Readonly Standard Security Support	N/A	Y	The role being removed from the user.
Output				Feedback or success/failure of action.
Action-success	True \| false	N/A	N/A	Whether the user's action was successful or not.
Reason	String	N/A	N/A	Reason for the action failure, if any.

Note 1: * = required parameter

Command Path – tolt>system >aaa>user>
Module – tolt
Container – system
Container – aaa
Container – user
Action – remove-role
Types – Input Parameters
- *Username – The username of the user to be created. Username must be a printable string.
  - string
- *Roles – One or more roles assigned to the user.
  - Admin | Maintenance | Readonly | Standard | Security | Support
Types – Output Feedback on success/failure of action.
- Action-success – The initial password to be given to the user. The password will be marked as change on first login to ensure a unique password for each user only known by that user.
  - True | false
- Reason – Reason for the failure, if any.
  - string

AAA User Remove Role Example

Command Path – tolt>system>aaa>user>
Module – tolt
Container – system
Container – aaa
Container – user
Action – remove-role

Types – Example Parameters
- username bolt-standard
- role security

From the MDS1-ESUA(config)# command line, input tolt system aaa user remove-role username bolt-standard role security, and press Enter.
Outputs similar to the following are displayed:

MDS1-ESUA(config)# tolt system aaa user remove-role username bolt-standard role security <enter>
MDS1-ESUA<config)#
System message at 2021-01-01 14:21:21...
Commit performed by admin via tcp using system.
MDS1-ESUA(config)# _