Cisco DS-C9124-K9 Troubleshooting Guide - Page 350

User and Role Issues Chapter 18 Troubleshooting Users and Roles Send documentation comments to [email protected] User Cannot Access Certain Features Symptom User cannot access certain features. Table 18-4 User Cannot Access Certain Features Symptom User cannot access certain features. Possible Cause User is assigned incorrect role. Solution For RADIUS, configure the vendor-specific attributes on the server for the role using Cisco-AVPair = "shell: roles = "" ". Role is not configured for appropriate access. For TACACS+, configure the attribute and value pair on the server for the role using roles="vsan-admin storage-admin". See the "Verifying Roles Using Device Manager" section on page 18-8 or the "Verifying Roles Using the CLI" section on page 18-9. See the "Verifying Roles Using Device Manager" section on page 18-8 or the "Verifying Roles Using the CLI" section on page 18-9. Verifying Roles Using Device Manager To verify user role-based access using Device Manager, follow these steps: Step 1 Step 2 Step 3 Step 4 Step 5 Step 6 Step 7 Step 8 Choose Security > Users... to view the roles assigned to the user. Right-click a user and click Delete to delete the user. Click Create to create a user. You see the Create User dialog box. Set the username and password fields. Check the role check boxes for each role that you want to assign to the user and click Create to create the user. Choose Security > Roles... to view the roles. Right-click a role and select Rules to view or modify the rules assigned to a role. Check the feature check boxes for the features that you want this role to access and click Apply to save these changes. 18-8 Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x OL-9285-05