HP 6125XLG R2306-HP 6125XLG Blade Switch Fundamentals Command Reference - Page 63

role feature-group, rule, feature group includes all Layer

Page 63 highlights

role feature-group Use role feature-group to create a user role feature group and enter user role feature group view. Use undo role feature-group to delete a user role feature group. Syntax role feature-group name feature-group-name undo role feature-group name feature-group-name Default Two user role feature groups, L2 and L3, are created. Views System view Predefined user roles network-admin Parameters name feature-group-name: Specifies a feature group name. The feature-group-name argument is a case-sensitive string of 1 to 31 characters. Usage guidelines Assign a set of features to a user role feature group for easy permission assignment management. In addition to the predefined feature groups L2 and L3, you can create up to 64 user role feature groups. The L2 feature group includes all Layer 2 feature commands, and the L3 feature group includes all Layer 3 feature commands. These predefined feature groups cannot be deleted. After you create a user role feature group, you can use the display role feature command to display the features available in the system and use the feature command to add features to the feature group. Examples # Create the feature group security-features. system-view [Sysname] role feature-group name security-features [Sysname-featuregrp-security-features] Related commands • display role feature-group • display role feature • feature rule Use rule to create or change a user role rule for controlling command access. Use undo rule to delete a user role rule. Syntax rule number { deny | permit } { command command-string | { execute | read | write } * { feature [ feature-name ] | feature-group feature-group-name } } 56

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221

56
role feature-group
Use
role feature-group
to create a user role feature group and enter user role feature group view.
Use
undo role feature-group
to delete a user role feature group.
Syntax
role feature-group name
feature-group-name
undo role feature-group name
feature-group-name
Default
Two user role feature groups,
L2
and
L3
, are created.
Views
System view
Predefined user roles
network-admin
Parameters
name
feature-group-name
: Specifies a feature group name. The
feature-group-name
argument is a
case-sensitive string of 1 to 31 characters.
Usage guidelines
Assign a set of features to a user role feature group for easy permission assignment management.
In addition to the predefined feature groups
L2
and
L3
, you can create up to 64 user role feature groups.
The
L2
feature group includes all Layer 2 feature commands, and the
L3
feature group includes all Layer
3 feature commands. These predefined feature groups cannot be deleted.
After you create a user role feature group, you can use the
display role feature
command to display the
features available in the system and use the
feature
command to add features to the feature group.
Examples
# Create the feature group
security-features
.
<Sysname> system-view
[Sysname] role feature-group name security-features
[Sysname-featuregrp-security-features]
Related commands
display role feature-group
display role feature
feature
rule
Use
rule
to create or change a user role rule for controlling command access.
Use
undo rule
to delete a user role rule.
Syntax
rule
number
{
deny
|
permit
} {
command
command-string
|
{
execute
|
read
|
write
} * {
feature
[
feature-name
] |
feature-group
feature-group-name
} }