Brocade Communications Systems A7990A - StorageWorks SAN Director 4/16 Blade Switch Command Reference Manual page 801

RBAC Command Availability
This appendix explains how a command is validated when it is typed at the command prompt.
A command must be validated based on the user account's role before the command is executed.
Validation is done with these checks, in this order:
1. Active/Standby availability: on chassis-based systems, check that the command is available on the
Control Processor (CP).
2. RBAC availability: check that the invoking user's role is permitted to invoke the command. If the
command modifies system state, the user's role must have modify permission for the command. If
the command only displays system state, the user's role must have observe permission for the
command. Some commands both observe and modify system state and thus require observe-modify
permission.
3. Admin Domain availability: check that the command is allowed in the currently selected Admin
Domain.
4. Command-specific: checks such as whether the command is supported on the platform for which it
is targeted, etc.
Refer to
Table 1-1
Command Name
authUtil
aaaConfig
ad
agshow
agtcfgDefault
agtcfgSet
agtcfgShow
aliAdd
aliCreate
aliDelete
aliRemove
aliShow
Fabric OS Command Reference Manual
Publication Number: 53-1000240-01
Table 1-1 for the RBAC availability of all commands, as used by Fabric OS in Step 2.
RBAC Availability of All Commands (O = observe, OM = observe-modify, N =
none/not available)
User Oper
N
N
N
O
O
O
O
O
O
O
O
O
Switch Zone Fabric
ator Admin Admin Admin
N N N
N N N
N N N
OM OM O
O OM N
O OM N
O OM N
O O OM
O O OM
O O OM
O O OM
O O OM
Appendix
A
Basic Admin
Switch
Admin
N N OM
N N OM
N N OM
OM O OM
OM O OM
OM O OM
OM O OM
OM O OM
OM O OM
OM O OM
OM O OM
OM O OM
A-1