SR OS provides the following built-in (system-provisioned) AAA command authorization profiles, these profiles can be removed or modified:
default
administrative
The built-in profiles are applicable to users using the classic CLI or the MD-CLI, and contain rules that apply to classic CLI and rules that apply to MD-CLI interfaces in the same profile.
By default, in SR OS, the administrative profile is associated with the built-in user called 'admin'.
In the classic CLI, the default profile is automatically assigned to any newly-created user, but the operator can remove the profile from any user and replace it with another profile. The classic CLI also has an internal mechanism that denies access to show system security commands for all users, so users must be given access to these commands with a permit entry in a profile.
In the MD-CLI, a newly-created user is not associated with any profile. The operator can manually associate a user with the default profile if required.