access_rights_of_different_user_account

Access Rights of Different User Account Types

CHAPTERS

This guide applies to:

T1500-28PCT v3 or above, T1500G-10PS v2 or above, T1500G-10MPS v2 or above, T1500G-8T v2 or above, T1600G-52TS v3 or above, T1600G-52PS v3 or above, T1600G-28PS v3 or above, T1600G-28TS v3 or above, T1600G-18TS v2 or above, T1700X-16TS V3 or above, T1700G-28TQ V3 or above, T2500G-10TS V2 or above, T2600G-52TS v3 or above, T2600G-28TS v3 or above, T2600G-28MPS v3 or above, T2600G-28SQ v1 or above, T2600G-18TS v2 or above.

TP-Link switches provide four types of user accounts with different access rights to realize role-based security. The four types of user accounts are: Admin (3), Operator (2), Power User (1) and User (0). The numbers in parentheses indicate the access level of the user account types. Larger numbers mean more features the types of users can access.

The following table shows the access level requirement for each feature.

Note:

Some features listed in the following table may not be supported by your switch.

Features			Access Level Requirements
SYSTEM
System Info	System Summary		≥0
	Device Description		≥2
	System Time		≥2
	Daylight Saving Time		≥2
	System IP		≥1
	System IPv6		≥1
User Management			3
System Tools	Boot Config		3
	Restore Config		3
	Backup Config		≥2
	Firmware Update		3
	DHCP Auto Install		3
	System Reboot		3
	System Reset		3
EEE			≥1
PoE	PoE Config		≥0
PoE	PoE Profile		≥1
Stack	Stack Manage		≥0
	Stack Info		≥0
	Stack Config		≥1
SDM Template			≥2
Time Range			≥1
L2 FEATURES
Switching	Port		≥2
	DDM	DDM Config	≥2
		Threshold Config	≥2
		DDM Status	≥0
		SFP Info	≥0
	LAG	LAG Table	≥0
		Static LAG	≥1
		LACP Config	≥1
	MAC Address		≥2
VLAN			≥1
Multicast	IGMP Snooping		≥1
	MLD Snooping		≥1
	MVR		3
	Multicast Filtering		≥1
	Multicast Info		≥0
Spanning Tree	STP Config	STP Config	≥1
	STP Config	STP Summary	≥0
	Port Config		≥1
	MSTP Instance		≥1
	STP Security		≥1
LLDP	LLDP Config	Global Config	≥1
		Port Config	≥1
		Local Info	≥0
		Neighbor Info	≥0
		Statistic Info	≥0
	LLDP-MED Config	Global Config	≥1
		Port Config	≥1
		Local Info	≥0
		Neighbor Info	≥0
L2PT			≥2
PPPoE			≥1
L3 FEATURES
Routing Table			≥0
ARP	ARP Table		≥0
	Static ARP		≥1
	Gratuitous ARP		≥1
	Proxy ARP		≥1
	Local Proxy ARP		≥1
Interface			≥1
Static Routing			≥1
DHCP Service	DHCP Server	DHCP Server	≥1
		Pool Setting	≥1
		Manual Binding	≥1
		DHCP Client List	≥1
		Packet Statistics	≥0
	DHCP Relay		≥1
	DHCP L2 Relay		≥1
QoS
Class of Service			≥1
Bandwidth Control			≥0
Voice VLAN			≥1
Auto VoIP			≥1
SECURITY
Access Security	Access Control		≥2
	HTTP Config		≥2
	HTTPS Config		≥1
	SSH Config		≥1
	Telnet Config		≥2
	Serial Port Config		≥2
AAA	Global Config		≥0
	Method List		3
	Dot1x List		3
	Server Group		3
	RADIUS Config		3
	TACACS+ Config		3
802.1x	Global Config		≥1
	Port Config		≥1
	Authenticator State		≥0
Port Security			≥2
ACL			≥1
IPv4 IMPB	IP-MAC Binding		≥1
	ARP Detection	Global Config	≥1
		Port Config	≥1
		ARP Statistics	≥0
	IPv4 Source Guard		≥1
IPv6 IMPB	IPv6-MAC Binding		≥1
	ND Detection	Global Config	≥1
		Port Config	≥1
		ND Statistics	≥0
	IPv6 Source Guard		≥1
DHCP Filter			≥1
DoS Defend			≥1
MAINTENANCE
System Monitor			≥0
Traffic Monitor			≥0
Mirroring			≥2
sFlow			≥2
Ethernet OAM			≥2
DLDP			≥2
SNMP			≥2
Logs	Log Table		≥0
	Local Logs		≥2
	Remote Logs		≥2
	Backup Logs		3
Device Diagnostics			≥0
Network Diagnostics	Ping		≥0
Network Diagnostics	Tracert		≥1
Save			≥0