HP Cisco Nexus 5000 Cisco Nexus 5000 Series Switch CLI Software Configuration - Page 332

Configuring RBAC Chapter 22 Configuring User Accounts and RBAC Send feedback to [email protected] Step 3 Step 4 Step 5 Step 6 Step 7 Command switch(config-role)# rule number {deny | permit} command command-string switch(config-role)# rule number {deny | permit} {read | read-write} switch(config-role)# rule number {deny | permit} {read | read-write} feature feature-name switch(config-role)# rule number {deny | permit} {read | read-write} feature-group group-name switch(config-role)# description text switch(config-role)# exit switch(config)# show role switch(config)# copy running-config startup-config Purpose Configures a command rule. The command-string argument can contain spaces and regular expressions. For example, "interface ethernet *" includes all Ethernet interfaces. Repeat this command for as many rules as needed. Configures a read only or read and write rule for all operations. Configures a read-only or read-and-write rule for a feature. Use the show role feature command to display a list of features. Repeat this command for as many rules as needed. Configures a read-only or read-and-write rule for a feature group. Use the show role feature-group command to display a list of feature groups. Repeat this command for as many rules as needed. (Optional) Configures the role description. You can include spaces in the description. Exits role configuration mode. (Optional) Displays the user role configuration. (Optional) Copies the running configuration to the startup configuration. The following example shows how to create user roles and specify rules: switch# configure terminal switch(config)# role name UserA switch(config-role)# rule deny command clear users switch(config-role)# rule deny read-write switch(config-role)# rule permit read feature router-bgp switch(config-role)# rule deny read-write L3 switch(config-role)# description This role does not allow users to use clear commands switch(config-role)# exit switch(config)# show role switch(config)# copy running-config startup-config 22-6 Cisco Nexus 5000 Series Switch CLI Software Configuration Guide OL-16597-01