HP Enterprise FlexNetwork 10500 Series, Руководство по настройке

Страница: 30 / 325

21
Configuration task list
Tasks at a glance
(Required.) Creating a user role
(Required.) Configuring user role rules
(Optional.) Configuring a feature group
(Required.) Configuring resource access policies :
•
Configuring the user role interface policy
•
Configuring the user role VLAN policy
•
Configuring the user role VPN instance policy
(Optional.) Assigning user roles
(Optional.) Configuring temporary user role authorization
Creating a user role
In addition to the predefined user roles, you can create a maximum of 64 custom user roles for
granular access control.
To create a user role:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a user role and
enter its view.
role name role-name
By default, the system has the following
predefined user roles:
•
network-admin.
•
network-operator.
•
mdc-admin.
•
mdc-operator.
•
level- n (where n equals an integer
in the range of 0 to 15).
•
security-audit.
•
guest-manager.
Among these user roles, only the
permissions and descriptions of the
level-0 to level-14 user roles are
configurable.
3. (Optional.) Configure a
description for the user
role.
description text
By default, a user role does not have a
description.
Configuring user role rules
You can configure user role rules to permit or deny the access of a user role to specific commands,
Web pages, XML elements, and MIB nodes.