HP Cisco Nexus 5000 Cisco MDS 9000 Family CLI Configuration Guide - Release 4. - Page 783

Chapter 32 Configuring Users and Common Roles Role Distributions Send documentation comments to [email protected] Example 32-1 Displays Information for All Roles switch# show role Role: network-admin Description: Predefined Network Admin group. This role cannot be modified Access to all the switch commands Role: network-operator Description: Predefined Network Operator group. This role cannot be modified Access to Show commands and selected Exec commands Role: svc-admin Description: Predefined SVC Admin group. This role cannot be modified Access to all SAN Volume Controller commands Role: svc-operator Description: Predefined SVC Operator group. This role cannot be modified Access to selected SAN Volume Controller commands Role: TechDocs vsan policy: permit (default) Role: sangroup Description: SAN management group vsan policy: deny Permitted vsans: 10-30 Rule Type Command-type Feature 1. permit config * 2. deny config fspf 3. permit debug zone 4. permit exec fcping Displaying Roles When Distribution is Enabled Use the show role command to display the configuration database. Use the show role status command to display whether distribution is enabled for role configuration, the current fabric status (locked or unlocked), and the last operation performed. See Example 32-2. Example 32-2 Displays the Role Status Information switch# show role status Distribution: Enabled Session State: Locked Last operation (initiated from this switch): Distribution enable Last operation status: Success Use the show role pending command to display the pending role database. Example 32-3 displays the output of the show role pending command by following this procedure: 1. Create the role called myrole using the role name myrole command. 2. Issue the rule 1 permit config feature fspf command. 3. Issue the show role pending command to see the output. OL-18084-01, Cisco MDS NX-OS Release 4.x Cisco MDS 9000 Family CLI Configuration Guide 32-7