Cisco Nexus 3548 - Configuring RBAC; Creating User Roles and Rules

Configuring RBAC
Creating User Roles and Rules
The rule number that you specify determines the order in which the rules are applied. Rules are applied in
descending order. For example, if a role has three rules, rule 3 is applied before rule 2, which is applied before
rule 1.
Procedure
PurposeCommand or Action
Enters global configuration mode.switch# configure terminal
Step 1
Specifies a user role and enters role configuration mode.
switch(config) # role name role-name
Step 2
The role-name argument is a case-sensitive,
alphanumeric character string with a maximum of 16
characters.
Configures a command rule.
switch(config-role) # rule number
{deny | permit} command
command-string
Step 3
The command-string can contain spaces and regular
expressions. For example, interface ethernet * includes
all Ethernet interfaces.
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for all
operations.
switch(config-role)# rule number
{deny | permit} {read | read-write}
Step 4
Configures a read-only or read-and-write rule for a
feature.
switch(config-role)# rule number
{deny | permit} {read | read-write}
feature feature-name
Step 5
Use the show role feature command to display a list of
features.
Repeat this command for as many rules as needed.
Configures a read-only or read-and-write rule for a
feature group.
switch(config-role)# rule number
{deny | permit} {read | read-write}
feature-group group-name
Step 6
Use the show role feature-group command to display
a list of feature groups.
Repeat this command for as many rules as needed.
(Optional)
Configures the role description. You can include spaces
in the description.
switch(config-role)# description text
Step 7
Exits role configuration mode.switch(config-role)# end
Step 8
Cisco Nexus 3548 Switch NX-OS System Management Configuration Guide, Release 6.x
26
Configuring User Accounts and RBAC
Configuring RBAC