HP Cisco MDS 9020 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 905

Chapter 20 R Commands role name Send documentation comments to [email protected] Usage Guidelines Roles are assigned rules. Roles are a group of rules defining a user's access to certain commands. Users are assigned roles. The rules within roles can be assigned to permit or deny access to the following commands: clear Clear commands config Configuration commands debug Debug commands exec EXEC commands show Show commands These commands can have permit or deny options within that command line. Examples The following example shows how to assign users to a new role. switch# config terminal switch(config)# role name techdocs switch(config-role)# switch(config)# no role name techdocs switch(config)# switch(config-role)# description Entire Tech. Docs. group switch(config-role)# no description switch# config terminal switch(config)# role name sangroup switch(config-role)# switch(config-role)# rule 1 permit config switch(config-role)# rule 2 deny config feature fspf switch(config-role)# rule 3 permit debug feature zone switch(config-role)# rule 4 permit exec feature fcping switch(config-role)# no rule 4 Role: network-operator Description: Predefined Network Operator group. This role cannot be modified Access to Show commands and selected Exec commands Related Commands Command show role Description Displays all roles configured on the switch including the rules based on each role. OL-16217-01, Cisco MDS SAN-OS Release 3.x Cisco MDS 9000 Family Command Reference 20-35