Command Rbac Permissions And Ad Types - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

4. PortMember: allows all control operations only if the port or the local switch is part of the

Command RBAC permissions and AD types

Two RBAC roles are permitted to perform Encryption operations.
•
•
See
TABLE 4 Encryption command RBAC availability and admin domain type
Command name
addmembernode
addhaclustermember
addinitiator
addLUN
commit
createcontainer
createencgroup
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
current AD. View access is allowed if the device attached to the port is part of the current AD.
Admin and SecurityAdmin
Users authenticated with the Admin and SecurityAdmin RBAC roles may perform cryptographic
functions assigned to the FIPS Crypto Officer, including the following:
•
Perform encryption node initialization.
•
Enable cryptographic operations.
•
Manage I/O functions for critical security parameters (CSPs).
•
Zeroize encryption CSPs.
•
Register and configure a key vault.
•
Configure a recovery share policy.
•
Create and register recovery share.
•
Perform encryption group- and clustering-related operations.
•
Manage keys, including creation, recovery, and archive functions.
Admin and FabricAdmin
Users authenticated with the Admin and FabricAdmin RBAC roles may perform routine
Encryption Switch management functions, including the following:
•
Configure virtual devices and crypto LUNs.
•
Configure LUN and tape associations.
•
Perform rekeying operations.
•
Perform firmware download.
•
Perform regular Fabric OS management functions.
Table 4 for the RBAC permissions when using the encryption configuration commands.
User Admin Operator
N OM N
N OM N
N OM N
N OM N
N OM N
N OM N
N OM N

Command RBAC permissions and AD types

1
Switch Zone Fabric
Admin Admin Admin
N N N
N N OM
N N OM
N N OM
N N OM
N N OM
N N N
Basic Security Admin Domain
Switch Admin
Admin
N OM Disallowed
N N Disallowed
N N Disallowed
N N Disallowed
N N Disallowed
N N Disallowed
N OM Disallowed
3
129