# Unable to do config for Admin in confd-6.4.2

**URL:** <https://dmap-community.ductus.global/t/unable-to-do-config-for-admin-in-confd-6-4-2/1414>\
**Category:** CDB and CDB API\
**Created:** [July 20, 2017, 1:31am UTC](https://dmap-community.ductus.global/t/unable-to-do-config-for-admin-in-confd-6-4-2/1414 "2017-07-20T01:31:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shafath](https://avatars.discourse-cdn.com/v4/letter/s/5daacb/32.png) [@Shafath](https://dmap-community.ductus.global/u/Shafath)\
**Post date:** [July 20, 2017, 1:31am UTC](https://dmap-community.ductus.global/t/unable-to-do-config-for-admin-in-confd-6-4-2/1414/1 "2017-07-20T01:31:16Z")

</div>

Hi, i recently migrated to confd-6.4.2 from very older confd 4.0.7.1  
I have modified my, aaa.xml file, which i used to merge once the node becomes active.

```
  <users>
    <user>
      <name>admin</name>
      <uid>2000</uid>
      <gid>2000</gid>
      <password>$0$admin</password>
      <ssh_keydir>/home/admin/.ssh</ssh_keydir>
      <homedir>/home/admin</homedir>
    </user>
   </users>
</authentication>

```

```
<nacm xmlns="urn:ietf:params:xml:ns:yang:ietf-netconf-acm">
<enable-nacm>true</enable-nacm>

 <groups>
  <group>
    <name>admin</name>
    <user-name>*</user-name>
    <user-name>admin</user-name>
    <gid xmlns="http://tail-f.com/yang/acm">2000</gid>
  </group>

 </groups>

<rule-list>
  <name>admin</name>
  <group>admin</group>

  <cmdrule xmlns="http://tail-f.com/yang/acm">
    <name>shell-cmd sudo</name>
    <context>*</context>
    <command>shell-cmd sudo</command>
    <action>deny</action>
  </cmdrule>

  <cmdrule xmlns="http://tail-f.com/yang/acm">
    <name>others</name>
    <context>cli</context>
    <command>*</command>
    <access-operations>create read update delete exec</access-operations>
    <action>permit</action>
  </cmdrule>

```

Prompt clearly tells that i have become admin and i am part of admin.  
Prompt# id  
user = admin(2000), gid=2000, groups=admin, gids=2000  
Prompt#

But when i enter into the config mode, i am not able to config anything ?  
Is there anything i am missing ? Can you please help.

---

<div class="post-metadata">

**Author:** ![Shafath](https://avatars.discourse-cdn.com/v4/letter/s/5daacb/32.png) [@Shafath](https://dmap-community.ductus.global/u/Shafath)\
**Post date:** [July 26, 2017, 11:21am UTC](https://dmap-community.ductus.global/t/unable-to-do-config-for-admin-in-confd-6-4-2/1414/2 "2017-07-26T11:21:55Z")

</div>

Can anyone help me on this ?

---

<div class="post-metadata">

**Author:** ![waitai](https://yyz2.discourse-cdn.com/flex010/user_avatar/dmap-community.ductus.global/waitai/32/436_2.png) [@waitai](https://dmap-community.ductus.global/u/waitai)\
**Post date:** [July 26, 2017, 10:56pm UTC](https://dmap-community.ductus.global/t/unable-to-do-config-for-admin-in-confd-6-4-2/1414/3 "2017-07-26T22:56:18Z")

</div>

It looks like you are missing data rules in your `<rule-list>`. Without data rules, you won’t be able to edit any data nodes in your YANG model.

In the default aaa\_init.xml file, the default data rule for the admin user is as follows:

```
  <rule>
    <name>any-access</name>
    <action>permit</action>
  </rule>
```