Administrator's Guide v4.1.1 Manual

A user-defined role has a mandatory name and an optional description, as shown in the following
table.
Role attributes TABLE 46
Parameter Description
name The role name must be unique, begin with a letter, and can contain alphanumeric characters and
underscores. The length of the role name should be between 4 and 32 characters. The name cannot
be same as that of an existing user, an existing default role, or an existing user-defined role.
desc An optional description of the role. The description can be up to 64 characters and can include any
printable ASCII character, except for the following characters: single quotation marks (‘), double
quotation marks("), exclamation point (!), colon (:), and semi-colon (;). If the description contains
spaces, you must enclose the text in double quotation marks. if the description contains spaces
The operation of creating a role must satisfy the following criteria to succeed:
• The maximum number of roles supported on a chassis is 64.
• The command must be run from an account authorized for the operation.
• The role command is available in global configuration mode.
• If the role specified already exists, the role command modifies the existing role.
Displaying a role
In privileged EXEC mode, enter the show running-config role command.
switch# show running-config role
role name VLANAdmin desc "Manages security CLIs"
role name NetworkAdmin desc "Manages Network CLIs"
role name ClusterAdmin desc "Manages Cluster CLIs"
Creating or modifying a role
1. In privileged EXEC mode, use the configure terminal command to enter global configuration
mode.
switch# configure terminal
Entering configuration mode terminal
2. Enter the role command with the specified parameters.
switch(config)# role name VLANAdmin desc "Manages security CLIs"
Deleting a role
1. In privileged EXEC mode, use the configure terminal command to enter global configuration
mode.
switch# configure terminal
Entering configuration mode terminal
2. Enter the no role command with the specified parameters.
switch(config)# no role name VLANAdmin
Commonly used roles
The following examples illustrate the creation and configuration of two frequently-used administrative
roles and accounts: Brocade VCS Fabric security administrator, and FCoE Fabric administrator.
Displaying a role
270 Network OS Administrator’s Guide
53-1003225-04