HP Enterprise FlexFabric 12900E Series Command Reference Manual page 27

Table 4 Command output
Field
Role
Description
VLAN policy
Permitted VLANs
Interface policy
Permitted interfaces
VPN instance policy
Permitted VPN instances
Rule
Perm
Type
Scope
Description
User role name.
Predefined user role names:
•
network-admin.
•
network-operator.
•
level-n (where n represents an integer in the range of 0 to 15).
•
security-audit.
User role description.
VLAN policy of the user role:
•
deny—Denies access to any VLANs except for permitted
VLANs.
•
permit (default)—Default VLAN policy, which enables the user
role to access all VLANs.
VLANs accessible to the user role.
Interface policy of the user role:
•
deny—Denies access to any interfaces except for permitted
interfaces.
•
permit (default)—Default interface policy, which enables the
user role to access all interfaces.
Interfaces accessible to the user role.
VPN instance policy of the user role:
•
deny—Denies access to any VPN instances except for
permitted VPN instances.
•
permit (default)—Default VPN instance policy, which enables
the user role to access all VPN instances.
VPN instances accessible to the user role.
User role rule number.
Predefined user role rules are identified by sys-n, where n
represents an integer.
Access control type:
•
permit—User role has access to the items in the Entity field.
•
deny—User role does not have access to the items in the
Entity field.
Controlled type:
•
R—Read-only.
•
W—Write.
•
X—Execute.
Rule control scope:
•
command—Controls access to the command or commands,
as specified in the Entity field.
•
feature—Controls access to the commands of the feature, as
specified in the Entity field.
•
feature-group—Controls access to the commands of the
features in the feature group, as specified in the Entity field.
•
web-menu—Controls access to Web menus. This scope is not
supported in the current software version.
•
xml-element—Controls access to XML elements.
•
oid—Controls access to MIB nodes.
21