Cisco Nexus 7000 Series, Command Reference Manual

Page: 656 / 1018

role name
To create or modify a user role or privilege role and enter user role configuration mode, use the role name
command. To delete a user role, use the no form of this command.
role name { role-name| priv-n }
no role name
{ role-name| priv-n }
Syntax Description
User role name. The role-name argument has a
maximum length of 16 characters and is a
case-sensitive, alphanumeric character string.
role-name
Specifies the privilege level. The n argument is a
number between 0 and 13.
priv-n
Command Default
None
Command Modes
Global configuration
Command History
Modification Release
The priv-n keyword was added. 5.0(2)
This command was introduced. 4.0(1)
Usage Guidelines
The Cisco NX-OS software provides four default user roles:
•
network-admin
—
Complete read-and-write access to the entire Cisco NX-OS device (only available in
the default VDC)
•
network-operator
—
Complete read access to the entire Cisco NX-OS device (only available in the default
VDC)
• vdc-admin — Read-and-write access limited to a VDC
• vdc-operator — Read access limited to a VDC
You cannot change or remove the default user roles.
You must follow these guidelines when changing the rules of privilege roles:
• You cannot modify the priv-14 and priv-15 roles.
• You can add deny rules only to the priv-0 role.
Cisco Nexus 7000 Series Security Command Reference
630
R Commands
role name