H3C S6812 Series Command Reference Manual page 1678

When you assign other user roles to a local user who has the security-audit user role, the

system requests confirmation for deleting the security-audit user role for the local user.
Examples
# Configure the authorized VLAN of network access user abc as VLAN 2.
<Sysname> system-view
[Sysname] local-user abc class network
[Sysname-luser-network-abc] authorization-attribute vlan 2
# Configure the authorized VLAN of user group abc as VLAN 3.
<Sysname> system-view
[Sysname] user-group abc
[Sysname-ugroup-abc] authorization-attribute vlan 3
# Assign the security-audit user role to device management user xyz as the authorized user role.
<Sysname> system-view
[Sysname] local-user xyz class manage
[Sysname-luser-manage-xyz] authorization-attribute user-role security-audit
This operation will delete all other roles of the user. Are you sure? [Y/N]:y
Related commands
display local-user
display user-group
bind-attribute
Use bind-attribute to configure binding attributes for a local user.
Use undo bind-attribute to remove binding attributes of a local user.
Syntax
bind-attribute { ip ip-address | location interface interface-type interface-number | mac
mac-address | vlan vlan-id } *
undo bind-attribute { ip | location | mac | vlan } *
Default
No binding attributes are configured for a local user.
Views
Local user view
Predefined user roles
network-admin
Parameters
ip ip-address: Specifies the IP address to which the user is bound. This option applies only to 802.1X
users.
location interface interface-type interface-number: Specifies the interface to which the user is
bound. The interface-type argument represents the interface type, and the interface-number
argument represents the interface number. To pass authentication, the user must access the
network through the bound interface. This option applies only to LAN and portal users.
mac mac-address: Specifies the MAC address of the user in the format H-H-H. This option applies
only to LAN and portal users.
37