Rule - HPE FlexFabric 5940 Series Fundamentals Command Reference

display role feature-group
feature

rule

Use rule to create or change a user role rule.
Use undo rule to delete user role rules.
Syntax
rule number { deny | permit } { command command-string | { execute | read | write } * { feature
[ feature-name ] | feature-group feature-group-name | oid oid-string | xml-element [ xml-string ] } }
undo rule { number | all }
Default
A user-defined user role does not have any rules and cannot access any resources.
Views
User role view
Predefined user roles
network-admin
Parameters
number: Specifies a rule number in the range of 1 to 256.
deny: Denies access to the specified commands, XML elements, or MIB nodes.
permit: Permits access to the specified commands, XML elements, or MIB nodes.
command command-string: Specifies a command string. The command string can represent a
command or a group of commands. The command-string argument is a case-sensitive string of 1 to
128 characters, including the following characters:
•
The wildcard asterisk (*).
•
The delimiters space and tab.
•
All printable characters.
execute: Specifies the execute commands, XML elements, or MIB nodes. An execute command (for
example, ping), XML element, or MIB node executes a specific function or program.
read: Specifies the read commands, XML elements, or MIB nodes. A read command (for example,
display, dir, more, and pwd), XML element, or MIB node displays configuration or maintenance
information.
write: Specifies the write commands, XML elements, or MIB nodes. A write command (for example,
ssh server enable), XML element, or MIB node configures the system.
feature [ feature-name ]: Specifies one or all features. The feature-name argument is a
case-sensitive character string. If you do not specify a feature name, you specify all the features in
the system.
feature-group feature-group-name: Specifies a user-defined or predefined feature group. The
feature-group-name argument represents the feature group name, a case-sensitive string of 1 to 31
characters. If the feature group has not been created, the rule takes effect after the group is created.
To display the feature groups that have been created, use the display role feature-group
command.
oid oid-string: Specifies an OID of a MIB node. The oid-string argument represents the OID, a
case-insensitive string of 1 to 255 characters. The OID is a dotted numeric string that uniquely
identifies the path from the root node to this node. For example, 1.3.6.1.4.1.25506.8.35.14.19.1.1.
35