Description: Access rights of a role are a list of feature-wise permissions. The permissions of a feature are represented by a 4-byte tuple {rights (1-byte),featureid(3-bytes)}. The features in this list are in the ascending order of their feature-id.

rights: Access rights are classified into the following categories (given below along with the mapping to unix-style read,write and execute permissions):

0 : none (rwx-style = ---) 1 : all (rwx-style = rwx) 2 : view (rwx-style = r--) 3 : config (rwx-style = rw-) 4 : monitor (rwx-style = r-x)

Feature-id's: A feature is a set of commands which are grouped into a read, write or execute command-type. all (1), access (2), clear (3), device (4), dialup (5), diff_serve (6), event_log (7), field (8), firewall (9), froip (10), nat (11), routing (12), service_selection (13), show (14), tunnel (15), vpnvr (16)