> Source: [sk104009](https://support.checkpoint.com/results/sk/sk104009)

# sk104009 - Output of Clish command "show configuration rba" shows that "readonly" roles have "readwrite" features

| Property | Value |
|----------|-------|
| Solution ID | sk104009 |
| Date Created | 2015-01-09 |
| Last Modified | 2017-05-18 |
| Technical Level | Advanced |
| Products | Security Gateway, Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R82, R81.20, R82.20 |
| OS | Gaia |

## Symptoms

- * Output of Clish command "`show configuration rba`" shows that "`readonly`" roles have "`readwrite`" features.

* Output of Expert command "`grep roles /config/active`" shows that roles only have the defined "readonly" features.

* *Example*:

  1. Create the following RBA roles in the given order (names of features are given for Gaia Portal):

     1. Test1 - '*Read Only*' - Route Aggregation
     2. Test2 - '*Read Only*' - ARP
     3. Test3 - '*Read / Write*' - System Asset
     4. Test4 - '*Read Only*' - Backup

     <br />

     <br />

  2. Output of the Clish command '`show configuration rba`' would show that role "Test4" has "readwrite" features:

     ```
     
     add rba role Test1 domain-type System readonly-features aggregate
     add rba role Test2 domain-type System readonly-features arp
     add rba role Test3 domain-type System readwrite-features asset readonly-features
     arp
     add rba role Test4 domain-type System readwrite-features asset readonly-features
     backup
     ```

  3. Output of the Expert command '`grep "role:Test" /config/active | grep feature`' would show only the expected features:

     ```
     
     mrma:roles:role:Test4:ro:feature:defaultRO t
     mrma:roles:role:Test4:ro:feature:backup t
     mrma:roles:role:Test3:ro:feature:defaultRO t
     mrma:roles:role:Test3:rw:feature:defaultRW t
     mrma:roles:role:Test3:rw:feature:asset t
     mrma:roles:role:Test2:ro:feature:defaultRO t
     mrma:roles:role:Test2:ro:feature:arp t
     mrma:roles:role:Test1:ro:feature:defaultRO t
     mrma:roles:role:Test1:ro:feature:aggregate t
     ```

## Cause

Cosmetic issue in the Clish command '`show configuration`'.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content