1. A network device comprising: a user interface component to provide an interface to users of the network device for viewing and modifying configuration information associated with the network device, the configuration information for the network device being defined as a plurality of hierarchically arranged configuration statements; and a permission management component to store permissions relating to users permitted to modify the configuration information, the permissions including permission tags associated with one or more of the configuration statements, where the permission management component is further to receive intended modifications to the configuration statements, determine whether the intended modifications affect configuration statements associated with one of the permission tags, and output, when the intended modifications affect configuration statements associated with one or more of the permission tags, an indication that the configuration statements associated with the permission tags are protected.