Default Permission Allows reading the CLI matches This default permission set includes the following: allow-cli-matches Permission Table Identifier Description cli:allow-cli-matches Enables the cli_matches command without any pre-configured scope. cli:deny-cli-matches Denies the cli_matches command without any pre-configured scope.