Reference Guide

938 Brocade Fabric OS Command Reference
53-1004112-02
roleConfig
role_name
Specifies the name for the role to be created or modified. The name must be unique; it is
case-insensitive and can contain only alpha characters. The role name must be at least 4
characters long and cannot exceed 16 characters. The maximum number of user-defined
roles allowed on a chassis is 150. This operand is required.
The following operands are optional with --add and --change:
-desc description
Specifies a description for the role of up to 63 characters. Colons (:) are not permitted.
-class class_list
Specifies one or more MOF classes to which the role should have access. Classes must be
separated by commas. The requested class permissions cannot be higher than those of the
Fabric OS Admin role.
-perm permissions
Specifies the RBAC permissions for the role. The RBAC permissions restrict what the user
can do with the commands included in the classes to which the role has access. Valid RBAC
permissions include the following:
OM
Observe and modify.
O
Observe only.
N
No access. This parameter is not valid with the --add option.
--delete role_name [-force]
Deletes the specified user-defined role. This command prompts for confirmation unless
you use the -force option. The role must exist in the database and the role cannot currently
be assigned to a user account. You cannot delete any of the predefined Fabric OS roles.
--copy
Clones an existing user-defined role by copying an existing role to a new role name. The
new role inherits all the classes and permissions of the source role. You can further modify
the newly created role. The following operands are required:
new_role
The name for the new role must be unique; it is case-insensitive and can contain only alpha
characters. The role name must be at least 4 characters long and cannot exceed 16
characters.
-role source_role
Specified the name of the exiting role to be copied.
--show
Displays information about the specified roles. For each role, the command displays the
role name, description, assigned classes and RBAC permissions for each class. The
following displays options are exclusive:
role_name
Displays information about the specified user-defined role.