HP StorageWorks 2/16V Brocade Fabric Manager Administrator's Guide (53-1000019 - Page 35

Fabric and Switch Access 1 Role-Based Access Control Role-Based Access Control (RBAC) defines the capabilities that a user account has based on the role the account has been assigned. For each role, there is a set of pre-defined permissions on the jobs and tasks that can be performed on a fabric and its associated fabric elements. When you log in to a switch, your user account is associated with a pre-defined role. The role that your account is associated with determines the level of access you have on that switch and in the fabric. Following is a description of each of the roles: Admin Administrative use. FabricAdmin Administrative use excluding user management and Admin Domain management. SwitchAdmin Administrative use excluding security, user management, and zoning. ZoneAdmin Zone management only. BasicSwichAdmin Administrative use with a subset of Admin level access. Operator A subset of administrative tasks performed off-hours. User Nonadministrative use, such as monitoring system activity. For information about changing user account roles, see the Web Tools Administrator's Guide. You can log in to Fabric Manager with any role, as long as you have the correct credentials and access to AD0 and the physical fabric. All Fabric Manager users have full access (create, edit, delete) to all Fabric Manager resources, such as: • Firmware repository • Call home configurations • Preferences • Change Management profiles and reports • Third-party application launch configurations When you log in to a switch, the role of the user account with which you log in to the switch determines your permissions on that switch. If you try to perform an operation for which your role does not give permission, Fabric Manager displays an informative message. All fabric-level actions use the user role that you provide for the seed switch. Fabric Manager Administrator's Guide 1-7 Publication Number: 53-1000196-01-HP