Technical data
Web Tools Administrator’s Guide 13
53-1002934-02
Role-Based Access Control
1
2. Log in to an Admin Domain.
• To log in to the home domain, select Home Domain and click OK.
• To log in to an Admin Domain other than the home domain, select User Specified Domain,
enter the Admin Domain name or number, and click OK.
If the user name or password is incorrect, a dialog box displays indicating an authentication
failure.
If you entered valid credentials, but specified an invalid Admin Domain, a dialog box displays
from which you can select a valid Admin Domain or click Cancel to log in to your home domain.
Logging out
You can end a Web Tools session either by selecting Manage > Exit, or by closing the Switch
Explorer window.
You might be logged out of a session involuntarily, without explicitly selecting the Manage > Exit,
under the following conditions:
• A physical fabric administrator changes the contents of your currently selected Admin Domain.
• Your currently selected Admin Domain is removed or invalidated.
• Your currently selected Admin Domain is removed from your Admin Domain list.
• You initiate a firmware download from the Web Tool’s Switch Administration window. In this
case, you are logged out a few minutes later when the switch restarts.
• Your session times out.
Role-Based Access Control
Role-Based Access Control (RBAC) defines the capabilities that a user account has based on the
assigned role. For each role, there is a set of predefined permissions on the jobs and tasks that can
be performed on a fabric and its associated fabric elements.
When you log in to a switch, your user account is associated with a predefined role. The role
determines the level of access you have on that switch and in the fabric. Table 5 describes these
roles.
For information about creating unique user account roles, refer to “User-defined accounts” on
page 185.
TABLE 5 Predefined Web Tools roles
Role Description
admin You have full access to all of the Web Tools features.
operator You can perform any actions on the switch that do not affect the stored configuration.
securityadmin You can perform actions that do not affect the stored configuration.