Displaying Roles When Distribution Is Enabled - Cisco AP776A - Nexus Converged Network Switch 5020 Configuration Manual

Chapter 32 Configuring Users and Common Roles
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Example 32-1 Displays Information for All Roles
switch# show role
Role: network-admin
Description: Predefined Network Admin group. This role cannot be modified
Access to all the switch commands
Role: network-operator
Description: Predefined Network Operator group. This role cannot be modified
Access to Show commands and selected Exec commands
Role: svc-admin
Description: Predefined SVC Admin group. This role cannot be modified
Access to all SAN Volume Controller commands
Role: svc-operator
Description: Predefined SVC Operator group. This role cannot be modified
Access to selected SAN Volume Controller commands
Role: TechDocs
vsan policy: permit (default)
Role: sangroup
Description: SAN management group
vsan policy: deny
Permitted vsans: 10-30
---------------------------------------------
Rule
---------------------------------------------

Displaying Roles When Distribution is Enabled

Use the show role command to display the configuration database.
Use the show role status command to display whether distribution is enabled for role configuration, the
current fabric status (locked or unlocked), and the last operation performed. See
Example 32-2 Displays the Role Status Information
switch# show role status
Distribution: Enabled
Session State: Locked
Last operation (initiated from this switch): Distribution enable
Last operation status: Success
Use the show role pending command to display the pending role database.
Example 32-3
1.
2.
3.
OL-18084-01, Cisco MDS NX-OS Release 4.x
Type Command-type
1. permit config
2. deny config
3. permit debug
4. permit exec
displays the output of the show role pending command by following this procedure:
Create the role called
myrole
Issue the rule 1 permit config feature fspf command.
Issue the show role pending command to see the output.
Feature
*
fspf
zone
fcping
using the role name myrole command.
Cisco MDS 9000 Family CLI Configuration Guide
Role Distributions
Example 32-2.
32-7