Local User Commands; Authorization-Attribute - HP 5920 Command Reference Manual

Examples
# Place the ISP domain test to blocked state.
<Sysname> system-view
[Sysname] domain test
[Sysname-isp-test] state block
Related commands
display domain

Local user commands

authorization-attribute

Use authorization-attribute to configure authorization attributes for a local user or user group. After the
local user or a local user in the user group passes authentication, the device assigns these attributes to the
user.
Use undo authorization-attribute to restore the default.
Syntax
authorization-attribute { acl acl-number | idle-cut minute | user-role role-name | vlan vlan-id |
work-directory directory-name } *
undo authorization-attribute { acl | idle-cut | user-role role-name | vlan | work-directory } *
Default
No authorization attribute is configured for a local user or user group.
Views
Local user view, user group view
Predefined user roles
network-admin
Parameters
acl acl-number: Specifies the authorization ACL. The ACL number must be in the range of 2000 to 5999.
After passing authentication, a local user can access the network resources specified by this ACL.
idle-cut minute: Sets the idle timeout period. With the idle cut function enabled, an online user whose idle
period exceeds the specified idle timeout period is logged out. The minute argument must be in the range
of 1 to 120 minutes.
user-role role-name: Specifies the authorized user role. The role-name argument is a case-sensitive string
of 1 to 63 characters. The default user role for a local user created by a network-admin user is
network-operator. Up to 64 user roles can be specified for a user. For user role-related commands, see
Fundamentals Command Reference for RBAC commands. This option is available only in local user view,
and is not available in user group view.
22