Configuring Feature Groups - HP FlexFabric 7900 Series Configuration Manual

If two user-defined rules of a user role conflict, the one with a higher ID takes effect.
For level-0 to level- 1 4 user roles, if a predefined user role rule and a user-defined user role rule conflict, the
user-defined user role rule takes effect.
Any rule modification, addition, or removal for a user role takes effect only on users who are logged in
with the user role after the change.
To configure rules for a user role:
Step
1. Enter system view.
2. Enter user role view.
3. Configure a rule.

Configuring feature groups

Use feature groups to bulk assign command access permissions to sets of features. In addition to the
predefined feature groups, you can create up to 64 custom feature groups and assign a feature to
multiple feature groups.
To configure a feature group:
Step
1. Enter system view.
2. Create a feature group
and enter feature group
view.
3. Add a feature to the
feature group.
Command
system-view
role name role-name
•
Configure a command rule:
rule number { deny | permit }
command command-string
•
Configure a feature rule:
rule number { deny | permit }
{ execute | read | write } * feature
[ feature-name ]
•
Configure a feature group rule:
rule number { deny | permit }
{ execute | read | write } *
feature-group feature-group-name
Command
system-view
role feature-group name
feature-group-name
feature feature-name
48
Remarks
N/A
N/A
Configure at least one command.
By default, a user-defined user role
has no rules or access to any
command.
Repeat this step to add up to 256
rules to the user role.
IMPORTANT:
When you configure feature rules,
you can specify only features
available in the system and must
enter feature names exactly the same
as they are displayed, including the
case.
Remarks
N/A
By default, the system has the following
predefined feature groups:
•
L2—Includes all Layer 2 commands.
•
L3—Includes all Layer 3 commands.
These two groups are not user configurable.
By default, a feature group has no features.
IMPORTANT:
You can specify only features available in
the system and must enter feature names
exactly the same as they are displayed,
including the case.