Deleting access operation authorization in model-driven interfaces

In model-driven interfaces, when either the configure system security aaa remote-servers tacplus authorization request-format delete command or the configure service vprn aaa remote-servers tacplus authorization request-format delete command is configured, the system uses TACACS+ authorization requests to send the delete operation in the cmd argument and the path in the cmd-arg argument. These commands configure TACACS+ to allow modification and deletion. All deletions use the same TACACS+ cmd=delete request format.

Note:

The delete operation can be used anywhere in MD-CLI input, for example:

delete configure system name
configure delete system name
configure system delete name

The following example shows the AV pairs that are sent.

Example

[ex:/configure system]
A:admin@node2# delete name

# Command authorization
cmd=delete			
cmd-arg=configure
cmd-arg=system
cmd-arg=name
# Resulting change authorization
cmd=delete			
cmd-arg=configure
cmd-arg=system
cmd-arg=name