Creating User Roles; Configuring User Role Rules - HP 12500 Configuration Manual

Tasks at a glance
(Required.)
(Optional.)
(Optional.)
(Optional.)
(Optional.)

Creating user roles

In addition to the predefined user roles, you can create up to 64 custom user roles for granular access
control.
To create a user role:
Step
1. Enter system view.
2. Create a user role and
enter user role view.
3. (Optional.) Configure a
description for the user
role.

Configuring user role rules

Configure command, feature, and feature group rules to permit or deny the access of a user role to
specific commands. The configuration in the non-predefined user role view does not take effect for the
MDC.
You can configure up to 256 rules for a user role, but the total number of user role rules in the system
cannot exceed 1024.
If two rules of a user role conflict, the one with a higher rule number has priority.
Any rule modification, addition, or removal for a user role takes effect only on users that are logged in
with the user role after the change.
To configure rules for a user role:
Step
1. Enter system view.
Configuring user role rules
Configuring feature groups
Changing resource access policies
Assigning user roles
Configuring user role switching
Command
system-view
role name role-name
description text
Command
system-view
Remarks
N/A
By default, the system has 20 predefined
user roles: network-admin,
network-operator, mdc-admin,
mdc-operator, and level-n (where n
equals an integer in the range 0 to 15).
Among these user roles, only the
permissions of the user roles level-0 to
level-14 are configurable.
By default, a user role has no
description.
18
Remarks
N/A