HP Cisco MDS 9120 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 813

Send documentation comments to [email protected] 39 C H A P T E R Configuring Users and Common Roles The CLI and SNMP use common roles in all switches in the Cisco MDS 9000 Family. You can use the CLI to modify a role that was created using SNMP and vice versa. Users, passwords, and roles for all CLI and SNMP users are the same. A user configured through the CLI can access the switch using SNMP (for example, the Fabric Manager or the Device Manager) and vice versa. This chapter includes the following sections: • Role-Based Authorization, page 39-1 • Role Distributions, page 39-7 • User Accounts, page 39-10 • SSH Services, page 39-15 • Recovering the Administrator Password, page 39-20 • Configuring Cisco ACS Servers, page 39-21 • Default Settings, page 39-24 Role-Based Authorization Switches in the Cisco MDS 9000 Family perform authentication based on roles. Role-based authorization limits access to switch operations by assigning users to roles. This kind of authentication restricts you to management operations based on the roles to which you have been added. When you execute a command, perform command completion, or obtain context sensitive help, the switch software allows the operation to progress if you have permission to access that command. This section includes the following topics: • About Roles, page 39-2 • Configuring Roles and Profiles, page 39-2 • Deleting Common Roles, page 39-3 • About the VSAN Policy, page 39-3 • Modifying the VSAN Policy, page 39-4 • About Rules and Features for Each Role, page 39-4 • Modifying Rules, page 39-5 • Displaying Role-Based Information, page 39-7 OL-17256-03, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family Fabric Manager Configuration Guide 39-1