Brocade Fabric OS Command Reference Manual - Supporting Fabric OS v5.3.0 (53-1000436-01, June 2007)

Fabric OS Command Reference Manual 1

53-1000436-01

Chapter

Using Fabric OS Commands

This chapter explains how to manage a Brocade SAN and Brocade switches and directors using the

Fabric OS command line interface (CLI). The following information is discussed:

• “Understanding Role-Based Access Control” on page 1

• “Using the Command Line Interface” on page 2

Refer to Fabric OS Administrator’s Guide for information regarding optionally licensed features and

configuration and management procedures.

Understanding Role-Based Access Control

Fabric OS v5.3.0 implements Role-Based Access Control (RBAC) to control access to all Fabric OS

operations.

Seven roles are supported, as defined in Table 1. Role definitions are guided by perceived common

operational situations and the operations and effects a role is permitted to have on a fabric and

individual fabric elements.

Appendix A, “RBAC Command Availability” explains the Role-Based Access Control checks used to

validate commands, and provides the availability of every command, for every user role.

TABLE 1 Role Definitions

Role Name Definition

User Nonadministrative use, such as monitoring system activity

Operator A subset of administrative tasks typically required for

routine maintenance operations

SwitchAdmin Administrative use excluding security, user management,

and zoning

ZoneAdmin Zone management only

FabricAdmin Administrative use excluding user management and Admin

Domain managment

BasicSwitchAdmin A subset of administrative tasks, typically of a more limited

scope and effect

Admin May perform all administrative tasks

SecurityAdmin Administrative use including admin, security, user

management, and zoning