Brocade Communications Systems A7533A - Brocade 4Gb SAN Switch Base Command Reference Manual page 795

RBAC Command Availability
This appendix explains how a command is validated when it is typed at the command prompt.
A command must be validated based on the user account's role before the command is executed.
Validation is done with these checks, in this order:
1. Active/Standby availability: on chassis-based systems, check that the command is available on
2. RBAC availability: check that the invoking user's role is permitted to invoke the command. If the
3. Admin Domain availability: check that the command is allowed in the currently selected Admin
4. Command-specific: checks such as whether the command is supported on the platform for
Refer to
TABLE 1
RBAC Availability of All Commands (O = observe, OM = observe-modify, N = none/not available)
Command Name
aaaConfig
ad
ag
agshow
agtcfgDefault
agtcfgSet
agtcfgShow
aliAdd
aliCreate
aliDelete
aliRemove
aliShow
Fabric OS Command Reference Manual
53-1000436-01
the Control Processor (CP).
command modifies system state, the user's role must have modify permission for the
command. If the command only displays system state, the user's role must have observe
permission for the command. Some commands both observe and modify system state and
thus require observe-modify permission.
Domain.
which it is targeted, etc.
Table 1 for the RBAC availability of all commands, as used by Fabric OS in Step 2.
User Admin
N OM
N OM
O OM
O OM
O OM
O OM
O OM
O OM
O OM
O OM
O OM
O OM
Operator Switch Zone
Admin Admin
N N N
N N N
OM OM O
OM OM O
O OM N
O OM N
O OM N
O O OM
O O OM
O O OM
O O OM
O O OM
Fabric Basic Security
Admin Switch Admin
Admin
N N OM
N N O/OM
OM OM N
OM O N
OM O OM
OM O OM
OM O OM
OM O O
OM O O
OM O O
OM O O
OM O O
Appendix
A
763