1. A network device comprising: one or more processors to: display configuration information associated with the network device, the configuration information including a plurality of hierarchically arranged configuration statements, receive a first command to modify a particular configuration statement of the plurality of hierarchically arranged configuration statements, determine whether the particular configuration statement is associated with a permission tag, output, when the particular configuration statement is associated with the permission tag, an indication that the particular configuration statement is protected, receive a second command to remove the permission tag associated with the particular configuration statement, remove the permission tag based on the second command, modify the particular configuration statement based on the first command after the permission tag is removed, and reset protection of the particular configuration statement, by again associating the permission tag with the particular configuration statement, after modifying the particular configuration statement.