Authorization support for configuration groups

Authorization for MD-CLI configuration groups is done explicitly by creating an entry for that group configuration in the user’s profile.

For example, to deny access to router interfaces in both the main configuration branch and in the group configuration branch, create an entry for each one:

 entry 10 
     match "configure router interface"
     action deny
 exit
 entry 20 
     match "configure groups group router interface"
     action deny
 exit

Entry 10 prevents the user from viewing, creating, and editing router interfaces in the main configuration branch and from inheriting router interface configurations via configuration groups.

Entry 20 prevents the user from viewing, creating, and editing router interfaces in the groups configuration branch.