Full access to the shell I think the shell is locked down in admin. Also, you can enable features such as the menus for TR-069 and TR-064 which you would want to disable if it is an ISP branded router otherwise their software may try and configure your device for their service and it maybe a security hole.