Number of times since the server last restarted that a protocol operation request to alter a configuration datastore was denied.

An ordered collection of access control rules.

Enables or disables all NETCONF access control enforcement. If 'true', then enforcement is enabled. If 'false', then enforcement is disabled.

Number of times since the server last restarted that a notification was dropped for a subscription because access to the event type was denied.

Controls whether the server uses the groups reported by the NETCONF transport layer when it assigns the user to a set of NACM groups. If this leaf has the value 'false', any group names reported by the transport layer are ignored by the server.

Each entry identifies the username of a member of the group associated with this entry.

Each entry identifies the username of a member of the group associated with this entry.

Arbitrary name assigned to the rule-list.

One access control rule.

       Rules are processed in user-defined order until a match is
       found.  A rule matches if 'module-name', 'rule-type', and
       'access-operations' match the request.  If a rule
       matches, the 'action' leaf determines whether or not
       access is granted.

Arbitrary name assigned to the rule-list.

One access control rule.

       Rules are processed in user-defined order until a match is
       found.  A rule matches if 'module-name', 'rule-type', and
       'access-operations' match the request.  If a rule
       matches, the 'action' leaf determines whether or not
       access is granted.

Data node instance-identifier associated with the data node, action, or notification controlled by this rule.

             Configuration data or state data
             instance-identifiers start with a top-level
             data node.  A complete instance-identifier is
             required for this type of path value.

             The special value '/' refers to all possible
             datastore contents.

This leaf matches if it has the value '*' or if its value equals the requested notification name.

Access operations associated with this rule.

         This leaf matches if it has the value '*' or if the
         bit corresponding to the requested operation is set.

Arbitrary name assigned to the rule.

Name of the module associated with this rule.

         This leaf matches if it has the value '*' or if the
         object being accessed is defined in the module with the
         specified module name.

A textual description of the access rule.

Data node instance-identifier associated with the data node, action, or notification controlled by this rule.

             Configuration data or state data
             instance-identifiers start with a top-level
             data node.  A complete instance-identifier is
             required for this type of path value.

             The special value '/' refers to all possible
             datastore contents.

This leaf matches if it has the value '*' or if its value equals the requested notification name.

Access operations associated with this rule.

         This leaf matches if it has the value '*' or if the
         bit corresponding to the requested operation is set.

Arbitrary name assigned to the rule.

Name of the module associated with this rule.

         This leaf matches if it has the value '*' or if the
         object being accessed is defined in the module with the
         specified module name.

A textual description of the access rule.