Cisco Nexus 7000 Series Command Reference Manual page 606

permit vlan
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1, 10, 12, 20
This example shows how to deny a VLAN from a user role VLAN policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# no permit vlan 2
Related Commands
Command
vlan policy deny
role name
show role
Cisco Nexus 7000 Series Security Command Reference
580
Description
Enters VLAN policy configuration mode for a user
role.
Creates or specifies a user role and enters user role
configuration mode.
Displays user role information.
P Commands