HP Virtual Connect FlexFabric 10Gb24-port Module for c-Class BladeSystem - Manual (Page 95)

Command line 95
role
Manage role-based user authentication.
Supported actions: help, set, show
Item Description
set role Configure the authentication order or permitted operations for a VC role.
Syntax
set role <RoleName> Order=<order> Operations=<operations>
Parameter
RoleName (required) The VC privilege/role for which the existing authentication order is to be set.
Valid values are "domain", "network", "server", and "storage".
Property
Order (optional) The order of authentication to be set for a given role, specified as one or more
authentication methods separated by a comma. The format is
<method1,method2,method3>. Valid values are "ldap", "radius", "tacacs", and
"local".
Operations (optional) The operation permissions to be set for a given role, specified as one or more role
operations separated by a comma. Valid values are "FirmwareUpdate",
"SaveConfig", "RestoreConfig", "SupportFiles", "PortMonitoring", "Default"
(Factory Default), "*"(All), '' (None).
Enabling the "FirmwareUpdate" also requires enabling "SaveConfig" and
"SupportFiles" so that the VCSU firmware update works properly.
Examples
->set role network Order=tacacs,radius
Sets the order for the network privilege to be TACACS+, followed by RADIUS
->set role server Order=ldap,radius,tacacs
Sets the order for the server privilege to be LDAP, followed by RADIUS, followed
by TACACS+
->set role network operations=SupportFiles,PortMonitoring
Sets the network role operation permissions to "SupportFiles" and
"PortMonitoring"
->set role server operations=*
Sets the server role operation permissions to all operations enabled
->set role server operations=
Sets the storage role operation permissions to all operations disabled
->set role domain operations=Default
Sets the domain role operation permissions back to factory default
Item Description
show role Display the current authentication order and operation permissions for a VC role.
Syntax
show role [<RoleName>|*]
Parameter
RoleName (optional) The name of a VC role for which the existing authentication order is to be
displayed. Valid values are "domain", "server", "network", and "storage". Use
"*" to display detailed information for all user roles. If not specified, a summary
of all roles appears.
Examples
->show role
Displays a summary authentication order of all user roles