Create a user profile

Updated: July 17, 2026

Want to summarize with AI?

Use this procedure to create a user profile to provide restricted access to the System Admin console based on assigned privileges.

Users are included in a user group and assigned specific privileges, which provide restricted access to the commands and configurations in the System Admin console.

NCS 1004 supports up to 1,024 user profiles.

Note

System Admin users are different from XR users. Therefore, the username and password of a System Admin user cannot be used to access the XR, and the other way round.

As an XR user, you can access the System Admin by entering the admin command in the XR EXEC mode. NCS 1004 does not prompt you to enter any username and password. As an XR user, you have full access to the System Admin console.

Procedure

	1.	Enter the admin command to access System Admin EXEC mode. Example: `RP/0/RP0/CPU0:ios# admin`
	2.	Enter the config command to access System Admin config mode. Example: `sysadmin-vm:0_RP0# config`
	3.	Enter the aaa authentication users user user_name command to create a new user and enter user configuration mode. Example: `sysadmin-vm:0_RP0#(config)# aaa authentication users user us1`
	4.	Enter the password password command to specify the user password for user authentication. Example: `sysadmin-vm:0_RP0#(config-user-us1)# password pwd1`
	5.	Enter the uid user_id_value command to specify the user ID. Example: `sysadmin-vm:0_RP0#(config-user-us1)# uid 100` Enter any 32-bit integer.
	6.	Enter the gid group_id_value command to specify the group ID. Example: `sysadmin-vm:0_RP0#(config-user-us1)# gid 50` Enter any 32-bit integer.
	7.	Enter the ssh_keydir ssh_keydir command to specify the SSH key directory. Example: `sysadmin-vm:0_RP0#(config-user-us1)# ssh_keydir dir1` Specify any alphanumeric value.
	8.	Enter the homedir homedir command to specify the home directory. Example: `sysadmin-vm:0_RP0#(config-user-us1)# homedir dir2` Specify any alphanumeric value.
	9.	Enter the commit or end command to save the configuration. The commit command saves the configuration changes and remains within the configuration session. The end command prompts you to take one of these actions: Yes: saves configuration changes and exits the configuration session. No: exits the configuration session without committing the configuration changes. Cancel: remains in the configuration session without committing the configuration changes.

What to do next

After creating a user profile, complete these tasks:

Create a user group that includes the user profile that is created in this task. See Create a user group for details.
Create command rules that apply to the user group. See Create command rules for details.
Create data rules that apply to the user group. See Create data rules for details.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Create a user profile

Procedure

Example:

Example:

Example:

Example:

Example:

Example:

Example:

Example:

What to do next