HP Cisco MDS 9216 - Fabric Switch Configuration Manual page 738

Role-Based Authorization
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
You see the Rules dialog box shown in
Figure 39-4
Edit the rules you want to enable or disable for the common role.
Step 5
Click Apply to apply the new rules and close the Rules dialog, or click Close to close the Rules dialog
Step 6
without applying the rules.
Rule 1 is applied first, thus permitting, for example, sangroup users access to all config CLI commands.
Rule 2 is applied next, denying FSPF configuration to sangroup users. As a result, sangroup users can
perform all other config CLI commands, except fspf CLI configuration commands.
The order of rule placement is important. If you had swapped these two rules and issued the deny config
Note
feature fspf rule first and issued the permit config rule next, you would be allowing all sangroup users
to perform all configuration commands because the second rule globally overrode the first rule.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
39-6
Figure
Edit Common Role Rules Dialog Box
Chapter 39 Configuring Users and Common Roles
39-4. It may take a few minutes to display.
OL-8007-10, Cisco MDS SAN-OS Release 3.x