HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 365

Configuring User Accounts and RBAC Configuring RBAC The following example shows how to configure a user account: switch# configure terminal switch(config)# username NewUser password 4Ty18Rnt switch(config)# exit switch# show user-account Configuring RBAC Creating User Roles and Rules Each user role can have up to 256 rules. You can assign a user role to more that one user account. The rule number you specify determines the order in which the rules are applied. Rules are applied in descending order. For example, if a role has three rules, rule 3 is applied before rule 2, which is applied before rule 1. Procedure Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Command or Action switch# configure terminal Purpose Enters configuration mode. switch(config)# role name role-name Specifies a user role and enters role configuration mode. Therole-name argument is a case-sensitive, alphanumeric character string with a maximum length of 16 characters. switch(config-role)# rule number {deny | permit} command command-string Configures a command rule. The command-string argument can contain spaces and regular expressions. For example, "interface ethernet *" includes all Ethernet interfaces. Repeat this command for as many rules as needed. switch(config-role)# rule number Configures a read only or read and write rule for all {deny | permit} {read | read-write} operations. switch(config-role)# rule number Configures a read-only or read-and-write rule for a {deny | permit} {read | read-write} feature. feature feature-name Use the show role feature command to display a list of features. Repeat this command for as many rules as needed. switch(config-role)# rule number Configures a read-only or read-and-write rule for a {deny | permit} {read | read-write} feature group. feature-group group-name Use the show role feature-group command to display a list of feature groups. Repeat this command for as many rules as needed. switch(config-role)# description text (Optional) Configures the role description. You can include spaces in the description. OL-16597-01 Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 319