Cisco Nexus 3548 series - Configuring RBAC

Configuring RBAC
Creating User Roles and Rules
The rule number that you specify determines the order in which the rules are applied. Rules are applied in
descending order. For example, if a role has three rules, rule 3 is applied before rule 2, which is applied before
rule 1.
Procedure
PurposeCommand or Action
Enters global configuration mode.switch# configure terminal
Step 1
Specifies a user role and enters role
configuration mode.
switch(config) # role name role-name
Step 2
The role-name argument is a case-sensitive,
alphanumeric character string with a maximum
of 16 characters.
Configures a command rule.
switch(config-role) # rule number {deny |
permit} command command-string
Step 3
The command-string can contain spaces and
regular expressions. For example, interface
ethernet * includes all Ethernet interfaces.
Repeat this command for as many rules as
needed.
Configures a read-only or read-and-write rule
for all operations.
switch(config-role)# rule number {deny |
permit} {read | read-write}
Step 4
Configures a read-only or read-and-write rule
for a feature.
switch(config-role)# rule number {deny |
permit} {read | read-write} feature
feature-name
Step 5
Use the show role feature command to display
a list of features.
Repeat this command for as many rules as
needed.
Configures a read-only or read-and-write rule
for a feature group.
switch(config-role)# rule number {deny |
permit} {read | read-write} feature-group
group-name
Step 6
Use the show role feature-group command
to display a list of feature groups.
Repeat this command for as many rules as
needed.
Configures the role description. You can
include spaces in the description.
(Optional) switch(config-role)# description
text
Step 7
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 7.x
206
Configuring User Accounts and RBAC
Configuring RBAC