Table of Contents
Advertisement
The default home domain for the predefined account is AD0. For user-defined accounts, the default
home domain is the Admin Domain in the user's Admin Domain list with the lowest ID.
Role permissions
Table 11
TABLE 11
Abbreviation
O
M
OM
N
Table 12
permissions apply to all commands within the specified category. For a complete list of commands
and role permissions, see the Fabric OS Command Reference.
TABLE 12
Category
Admin Domains
Admin Domains—Selection
Access Gateway
APM
Audit
Authentication
Blade
Converged Enhanced Ethernet (FCoE)
Chassis Configuration
Chassis Management
Configure
Configuration Management
Data Migration Manager
DCE
Debug
Diagnostics
Encryption Configuration
Fabric OS Administrator's Guide
53-1001763-02
describes the types of permissions that are assigned to roles.
Permission types
Definition
Description
Observe
The user can run commands using options that display information only, such
as running userConfig --show -a to show all users on a switch.
Modify
The user can run commands using options that create, change, and delete
objects on the system, such as running userConfig --change username -r
rolename to change a user's role.
Observe and
The user can run commands using both observe and modify options; if a role
Modify
has modify permissions, it almost always has observe.
None
The user is not allowed to run commands in a given category.
shows the permission type for categories of commands that each role is assigned. The
RBAC permissions matrix
1
2
Role permission
Admin
Basic
Fabric
Operator
Switch
Admin
Admin
OM
N
N
N
OM
OM
OM
OM
OM
O
O
OM
OM
O
OM
O
OM
O
O
O
OM
N
N
N
OM
O
OM
OM
OM
O
OM
O
OM
O
OM
OM
OM
O
OM
OM
OM
O
O
O
OM
O
O
O
OM
N
N
N
OM
N
OM
N
N
N
N
N
OM
O
OM
OM
OM
N
O
N
User accounts overview
Security
Switch
User
Admin
Admin
O
N
N
OM
OM
OM
N
OM
O
N
OM
O
OM
O
O
OM
N
N
N
OM
O
O
O
O
N
OM
O
N
N
O
OM
O
N
O
O
N
N
N
N
O
O
O
N
N
N
N
OM
O
OM
N
N
5
Zone
Admin
N
OM
O
N
O
N
N
O
N
N
O
O
N
N
N
N
N
85
Hide quick links:
Advertisement
Table of Contents
