Configuring Rbac; Creating User Roles And Rules - Cisco Nexus 5600 Series Configuration Manual
Nx-os system management
Hide thumbs
Also See for Nexus 5600 Series:
- Hardware installation manual (100 pages) ,
- Reference (480 pages)
Table of Contents
Advertisement
Configuring RBAC
Configuring RBAC
Creating User Roles and Rules
The rule number that you specify determines the order in which the rules are applied. Rules are applied in
descending order. For example, if a role has three rules, rule 3 is applied before rule 2, which is applied before
rule 1.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
78
Command or Action
switch# configure terminal
switch(config) # role name role-name
switch(config-role) # rule number
{deny | permit} command
command-string
switch(config-role)# rule number
{deny | permit} {read | read-write}
switch(config-role)# rule number
{deny | permit} {read | read-write}
feature feature-name
switch(config-role)# rule number
{deny | permit} {read | read-write}
feature-group group-name
switch(config-role)# description text
switch(config-role)# end
Configuring User Accounts and RBAC
Purpose
Enters global configuration mode.
Specifies a user role and enters role configuration mode.
The role-name argument is a case-sensitive,
alphanumeric character string with a maximum of 16
characters.
Configures a command rule.
The command-string can contain spaces and regular
expressions. For example, interface ethernet * includes
all Ethernet interfaces.
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for all
operations.
Configures a read-only or read-and-write rule for a
feature.
Use the show role feature command to display a list of
features.
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for a
feature group.
Use the show role feature-group command to display
a list of feature groups.
Repeat this command for as many rules as needed.
(Optional)
Configures the role description. You can include spaces
in the description.
Exits role configuration mode.
OL-31641-01
- Quick Links:
- Table of Contents
Hide quick links:
Advertisement
Table of Contents
