Cisco MDS 9000 series Command Reference Manual page 856

role name
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Usage Guidelines Roles are assigned rules. Roles are a group of rules defining a user's access to certain commands. Users are
assigned roles. The rules within roles can be assigned to permit or deny access to the following commands:
clear Clear commands
config Configuration commands
debug Debug commands
exec EXEC commands
show Show commands
These commands can have permit or deny options within that command line.
Examples The following example shows how to assign users to a new role.
switch# config terminal
switch(config)# role name techdocs
switch(config-role)#
switch(config)# no role name techdocs
switch(config)#
switch(config-role)# description Entire Tech. Docs. group
switch(config-role)# no description
switch# config terminal
switch(config)# role name sangroup
switch(config-role)#
switch(config-role)# rule 1 permit config
switch(config-role)# rule 2 deny config feature fspf
switch(config-role)# rule 3 permit debug feature zone
switch(config-role)# rule 4 permit exec feature fcping
switch(config-role)# no rule 4
Role: network-operator
Description: Predefined Network Operator group. This role cannot be modified
Access to Show commands and selected Exec commands
Related Commands Command
show role
Cisco MDS 9000 Family Command Reference
20-32
Description
Displays all roles configured on the switch including the rules based on each
role.
Chapter 20 R Commands
OL-8413-07, Cisco MDS SAN-OS Release 3.x