For User with below configured privilege allow-configuration having issue with the set and delete of the configuration within the same hierarchy
# set system login class XXX allow-configuration "switch-options voip interface ge-1/0/0.0 vlan VOIP
# set switch-options voip interface ge-0/0/0.0 vlan VOIP ------> possible to add voip vlan on interface# delete switch-options voip interface ge-0/0/0.0 vlan VOIP
error: permission denied for switch-options (Unable to delete voip vlan) -----> however unable to delete voip vlan with the mentioned error
Based on the tests performed below configuration statements are working as expected on which both set and delete statements can be configured and
# set system login class XXX allow-configuration "switch-options voip"
# set system login class XXX allow-configuration "switch-options voip interface ge-0/0/0.0 “
Example:-
user-XXX@root# run show configuration | display set | match ge-0/0/0
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members V0
user-XXX@root# set switch-options voip interface ge-0/0/0.0 vlan VOIP
{master:0}[edit]
user-XXX@root# commit
configuration check succeeds
commit complete
set switch-options voip interface ge-0/0/0.0 vlan voice
user-XXX@root# delete switch-options voip interface ge-0/0/0.0 vlan VOIP
2024-07-18: Article validated2024-07-11 : Article Created