HP Cisco MDS 9124 Cisco MDS 9000 Family Fabric Manager Configuration Guide - R - Page 818

Role-Based Authorization Chapter 39 Configuring Users and Common Roles Send documentation comments to [email protected] You see the Rules dialog box shown in Figure 39-4. It may take a few minutes to display. Figure 39-4 Edit Common Role Rules Dialog Box Step 5 Step 6 Edit the rules you want to enable or disable for the common role. Click Apply to apply the new rules and close the Rules dialog box, or click Close to close the Rules dialog box without applying the rules. Rule 1 is applied first, thus permitting, for example, sangroup users access to all config CLI commands. Rule 2 is applied next, denying FSPF configuration to sangroup users. As a result, sangroup users can perform all other config CLI commands, except fspf CLI configuration commands. Note The order of rule placement is important. If you had swapped these two rules and issued the deny config feature fspf rule first and issued the permit config rule next, you would be allowing all sangroup users to perform all configuration commands because the second rule globally overrode the first rule. 39-6 Cisco MDS 9000 Family Fabric Manager Configuration Guide OL-17256-03, Cisco MDS NX-OS Release 4.x