Changing User Role Vsan Policies - Cisco Nexus 5600 Series Configuration Manual

Configuring User Accounts and RBAC
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7

Changing User Role VSAN Policies

You can change a user role VSAN policy to limit the VSANs that the user can access.
Procedure
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
OL-31641-01
Command or Action
switch# configure terminal
switch(config) # role name role-name
switch(config-role )# vlan policy deny
switch(config-role-vlan # permit vlan
vlan-list
switch(config-role-vlan) # exit
switch# show role
switch# copy running-config
startup-config
Command or Action
switch# configure terminal
switch(config-role) # role name
role-name
switch(config-role) # vsan policy deny
switch(config-role-vsan) # permit vsan
vsan-list
switch(config-role-vsan) # exit
switch# show role
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
Changing User Role VSAN Policies
Purpose
Enters global configuration mode.
Specifies a user role and enters role configuration
mode.
Enters role VLAN policy configuration mode.
Specifies a range of VLANs that the role can access.
Repeat this command for as many VLANs as needed.
Exits role VLAN policy configuration mode.
(Optional)
Displays the role configuration.
(Optional)
Saves the change persistently through reboots and
restarts by copying the running configuration to the
startup configuration.
Purpose
Enters global configuration mode.
Specifies a user role and enters role configuration
mode.
Enters role VSAN policy configuration mode.
Specifies a range of VSANs that the role can access.
Repeat this command for as many VSANs as needed.
Exits role VSAN policy configuration mode.
(Optional)
Displays the role configuration.
81