Cisco Nexus 9000 Series Configuration Manual page 196

Changing User Role VRF Policies
Command or Action
switch# configure terminal
switch(config)#
Step 2 role name role-name
Example:
switch(config)# role name UserA
switch(config-role)#
Step 3 vrf policy deny
Example:
switch(config-role)# vrf policy deny
switch(config-role-vrf)#
Step 4
permit vrf vrf-name
Example:
switch(config-role-vrf)# permit vrf vrf1
Step 5
exit
Example:
switch(config-role-vrf)# exit
switch(config-role)#
Step 6 (Optional) show role
Example:
switch(config-role)# show role
Step 7 (Optional) show role {pending | pending-diff}
Example:
switch(config-role)# show role pending
Step 8 (Optional) role commit
Example:
switch(config-role)# role commit
Step 9 (Optional) copy running-config startup-config
Example:
switch(config-role)# copy running-config
startup-config
Related Topics
Creating User Roles and
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
170
Purpose
Specifies a user role and enters role configuration mode.
Enters role VRF policy configuration mode.
Specifies the VRF that the role can access.
Repeat this command for as many VRFs as needed.
Exits role VRF policy configuration mode.
Displays the role configuration.
Displays the user role configuration pending for distribution.
Applies the user role configuration changes in the temporary
database to the running configuration.
Copies the running configuration to the startup
configuration.
Rules, on page 162
Configuring User Accounts and RBAC