Obtaining Temporary User Role Authorization; Displaying Rbac Settings; Rbac Configuration Examples; Rbac Configuration Example For Local Aaa Authentication Users - HPE FlexNetwork 5510 HI Series Fundamentals Configuration Manual

Step

Obtaining temporary user role authorization

AUX or VTY users must pass authentication before they can use a user role that is not included in
the user account they are logged in with.
Perform the following task in user view:
Task
Obtain the temporary
authorization to use a
user role.

Displaying RBAC settings

Execute display commands in any view.
Task
Display user role information.
Display user
information.
Display user role feature group
information.

RBAC configuration examples

RBAC configuration example for local AAA authentication
users
Network requirements
As shown in
192.168.1.58. The user account for the Telnet user is user1@bbb and is assigned the user role
role1.
Configure role1 to have the following permissions:
•
Can execute the read commands of any feature.
•
Cannot configure any VLANs except VLANs 10 to 20.
Command
super password [ role
rolename ]
Command
super [ rolename ]
Command
display role [ name role-name ]
role feature
display role feature [ name feature-name | verbose ]
display role feature-group [ name feature-group-name ] [ verbose ]
Figure 19, the switch performs local AAA authentication for the Telnet user at
Remarks
target user role.
Remarks
If you do not specify the rolename argument, you
obtain the default target user role for temporary user
role authorization.
The operation
unsuccessful password attempts.
The user role must have the permission to execute the
super command to obtain temporary user role
authorization.
55
fails after three consecutive