Cisco Nexus 9000 Series Configuration Manual page 194

Changing User Role VLAN Policies
Before you begin
Create one or more user roles.
SUMMARY STEPS
1. configure terminal
2. role name role-name
3. vlan policy deny
4. permit vlan vlan-list
5. exit
6. (Optional) show role
7. (Optional) show role {pending | pending-diff}
8. (Optional) role commit
9. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
role name role-name
Example:
switch(config)# role name UserA
switch(config-role)#
Step 3 vlan policy deny
Example:
switch(config-role)# vlan policy deny
switch(config-role-vlan)#
Step 4
permit vlan vlan-list
Example:
switch(config-role-vlan)# permit vlan 1-4
Step 5
exit
Example:
switch(config-role-vlan)# exit
switch(config-role)#
Step 6 (Optional) show role
Example:
switch(config)# show role
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
168
Configuring User Accounts and RBAC
Purpose
Enters global configuration mode.
Specifies a user role and enters role configuration mode.
Enters role VLAN policy configuration mode.
Specifies a range of VLANs that the role can access.
Repeat this command for as many VLANs as needed.
Exits role VLAN policy configuration mode.
Displays the role configuration.