HP FlexFabric 12900 series Command Reference Manual page 72

Default
A user-defined user role does not have any rules and cannot use any command, XML element, or MIB
node.
Views
User role view
Predefined user roles
network-admin
Parameters
number: Specifies a rule number in the range of 1 to 256.
deny: Denies access to any specified command, XML element, or MIB node.
permit: Permits access to any specified command, XML element, or MIB node.
command command-string: Specifies a command string. The command-string argument is a
case-sensitive string of 1 to 128 characters, including the following characters:
The wildcard asterisk (*).
•
• The delimiters space and tab.
All printable characters.
•
execute: Specifies the execute commands, XML elements, or MIB nodes. An execute command (for
example, ping) , XML element, or MIB node executes a specific function or program.
read: Specifies the read commands, XML elements, or MIB nodes. A read command (for example,
display, dir, more, or pwd), XML element, or MIB node displays configuration or maintenance
information.
write: Specifies the write commands, XML elements, or MIB nodes. A write command (for example, ssh
server enable), XML element, or MIB node configures the system.
feature [ feature-name ]: Specifies one or all features. The feature-name argument specifies a feature
name. If you do not specify a feature name, you specify all the features in the system. When you specify
a feature, you must enter the feature name as the name is displayed by display role feature, including the
case.
feature-group feature-group-name: Specifies a user-defined or predefined feature group. The
feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31
characters. If the feature group has not been created, the rule takes effect after the group is created. To
display the feature groups that have been created, use the display role feature-group command.
oid oid-string: Specifies an OID of a MIB node. The oid-string argument represents the OID, a
case-insensitive string of 1 to 512 characters. The OID is a dotted numeric string that uniquely identifies
the path from the root node to this node. For example, 1.3.6.1.4.1.25506.8.35.14.19.1.1.
xml-element [ xml-string ]: Specifies an XML element. The xml-string argument represents the XPath of the
XML element, a case-insensitive string of 1 to 512 characters. Use the forward slash (/) to separate Xpath
items, for example, Interfaces/Index/Name. If you do not specify an XML element, the rule applies to all
XML elements.
all: Deletes all the user role rules.
Usage guidelines
You can define the following types of rules for different access control granularities:
64