Cisco Nexus 5600 Series - User Role Policies

PermissionsFeature
Read and write permissions for Registered State
Change Notification (RSCN)-related commands
rscn
Read and write permissions for SNMP-related
commands
snmp
Read and write permissions for SNMP trap
target-related commands
snmpTargetAddrEntry
Read and write permissions for SNMP trap target
parameter-related commands
snmpTargetParamsEntry
Read and write permissions for SPAN-related
commands
span
Read and write permissions for SNMP trap
registry-related commands
trapRegEntry
Read and write permissions for Fibre Channel port
channel trunk-related commands
trunk
Read and write permissions for VSAN-related
commands
vsan
Read and write permissions for FCoE VLAN-VSAN
mapping command-related commands
vsanIfvsan
Read and write permissions for World Wide Name
(WWN)-related commands
wwnm
Read and write permissions for zoning commandszone
User Role Policies
You can define user role policies to limit the switch resources that the user can access, or to limit access to
interfaces, VLANs, and VSANs.
User role policies are constrained by the rules defined for the role. For example, if you define an interface
policy to permit access to specific interfaces, the user does not have access to the interfaces unless you configure
a command rule for the role to permit the interface command.
If a command rule permits access to specific resources (interfaces, VLANs, or VSANs), the user is permitted
to access these resources, even if the user is not listed in the user role policies associated with that user.
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
OL-31641-01 73
Configuring User Accounts and RBAC
User Role Policies