Configuring Rbac; Creating User Roles And Rules - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring User Accounts and RBAC
The following example shows how to configure a user account:
switch# configure terminal
switch(config)# username NewUser password 4Ty18Rnt
switch(config)# exit
switch# show user-account

Configuring RBAC

Creating User Roles and Rules

Each user role can have up to 256 rules. You can assign a user role to more that one user account.
The rule number you specify determines the order in which the rules are applied. Rules are applied in descending
order. For example, if a role has three rules, rule 3 is applied before rule 2, which is applied before rule 1.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
OL-16597-01
Command or Action
switch# configure terminal
switch(config)# role name role-name
switch(config-role)# rule number
{deny | permit} command
command-string
switch(config-role)# rule number
{deny | permit} {read | read-write}
switch(config-role)# rule number
{deny | permit} {read | read-write}
feature feature-name
switch(config-role)# rule number
{deny | permit} {read | read-write}
feature-group group-name
switch(config-role)# description text
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Purpose
Enters configuration mode.
Specifies a user role and enters role configuration mode.
Therole-name argument is a case-sensitive, alphanumeric
character string with a maximum length of 16 characters.
Configures a command rule.
The command-string argument can contain spaces and
regular expressions. For example, "interface ethernet *"
includes all Ethernet interfaces.
Repeat this command for as many rules as needed.
Configures a read only or read and write rule for all
operations.
Configures a read-only or read-and-write rule for a
feature.
Use the show role feature command to display a list of
features.
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for a
feature group.
Use the show role feature-group command to display
a list of feature groups.
Repeat this command for as many rules as needed.
(Optional)
Configures the role description. You can include spaces
in the description.
Configuring RBAC
319