By not restricting administrators and operations personnel to their proper privilege levels, access to restricted functions may be allowed before they are trained or experienced enough to use those functions. Network disruptions or outages could be caused by mistakes made by inexperienced administrators.
Review the accounts that have been defined locally on the network element and determine if the accounts have the lowest privilege level. User accounts must be set to a specific privilege level which can be mapped to specific commands or group of commands. Not all administrators should have the highest level unless they all perform all configuration tasks.
Fix Text (F-3082r3_fix)
Configure accounts with the least privilege rule. Each user will have access to only the privileges they require to perform their respective duties. Access to the highest privilege levels should be restricted to a few users.