Purpose
Command or Action
Displays the user role configuration pending for distribution.
(Optional)
show role
{
pending
|
pending-diff
}
Example:
Step 7
switch(config-role)# show role pending
Applies the user role configuration changes in the temporary
database to the running configuration.
(Optional)
role commit
Example:
Step 8
switch(config-role)# role commit
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 9
switch(config-role)# copy running-config
startup-config
Related Topics
, on page 162
Changing User Role VRF Policies
You can change a user role VRF policy to limit the VRFs that the user can access. By default, a user role
allows access to all VRFs.
Before you begin
Create one or more user roles.
If you want to distribute the user role configuration, enable user role configuration distribution on all Cisco
NX-OS devices to which you want the configuration distributed.
SUMMARY STEPS
1.
configure terminal
2.
role name role-name
3.
vrf policy deny
4.
permit vrf vrf-name
5.
exit
6.
(Optional)
show role
7.
(Optional)
show role
{
pending
|
pending-diff
}
8.
(Optional)
role commit
9.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
169
Configuring User Accounts and RBAC
Changing User Role VRF Policies
