Hi,
I'm trying to reset configuration (with "keep-users") as a user with all perms but "policy". I get an error:
/system reset-configuration keep-users=yes
Dangerous! Reset anyway? [y/N]:
y
system configuration will be reset
not enough permissions (9)
/user group print
[...]
3 name="name" policy=local,telnet,ssh,ftp,reboot,read,write,test,winbox,password,web,sniff,sensitive,api,!policy
"policy" is permission to change user configuration. "keep-users" parameter means "don't change user configuration". As a result "/system reset-configuration keep-users=yes" should be allowed without "policy" permission.