To explain further, the Administrative Profile feature allows
the network administrator to define a list of rules that control
the CLI commands available to a user. These rules are collected
in a "profile." The rules in a profile can define the set of
commands, or a command mode, to which a user is permitted or
denied access.  Within a profile, rule numbers determine the
order in which the rules are applied. When a user enters a CLI
command, rules within the first profile assigned to the user are
applied in descending order until there is a rule that matches
the input. If no rule permitting the command is found, then the
other profiles assigned to the user (if any) are searched for
rules permitting the command. Rules may use regular expressions
for command matching. All profiles have an implicit "deny all"
rule, such that any command that does not match any rule in the
profile is considered to have been denied by that profile (See
Example 1).  A user can be assigned to more than one profile. If
there are conf