Cisco MDS-9124 Troubleshooting Guide - Page 352

User and Role Issues Chapter 18 Troubleshooting Users and Roles Send documentation comments to [email protected] User Has Too Much Access Symptom User has too much access. Table 18-5 User Has Too Much Access Symptom User has too much access. Possible Cause User is assigned incorrect role or overlapping roles. Solution For RADIUS, configure the vendor-specific attributes on the server for the role using Cisco-AVPair = "shell: roles = "" ". Role is not configured for appropriate access. For TACACS+, configure the attribute and value pair on the server for the role using roles="vsan-admin storage-admin". See the "Verifying Roles Using Device Manager" section on page 18-8 or the "Verifying Roles Using the CLI" section on page 18-9. See the "Verifying Roles Using Device Manager" section on page 18-8 or the "Verifying Roles Using the CLI" section on page 18-9. User Cannot Configure Some VSANs Symptom User cannot configure some VSANs. Table 18-6 User Cannot Configure Some VSANs Symptom Possible Cause User cannot configure User is assigned a VSAN-restricted some VSANs. role. Solution See the "Verifying VSAN-Restricted Roles Using Fabric Manager" section on page 18-10 or the "Verifying VSAN-Restricted Roles Using the CLI" section on page 18-11. Verifying VSAN-Restricted Roles Using Fabric Manager To verify user role-based access using Fabric Manager, follow these steps: Step 1 Step 2 Step 3 Choose Switches > Security > Users and Roles and select the Roles tab to view the roles. Check the Scope Enable check box to make the role VSAN-restricted. Add the range of VSANs that you want to allow this role to configure in the Scope VSAN Id List field. 18-10 Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x OL-9285-05