Specifications

secpolicyadd
703Fabric OS Version 3.1.x/4.1.x Reference Guide
Add members to an existing policy.
Synopsis
secpolicyadd “name”, “member;member”
Availability
Admin
Release
V3.1.x and V4.1.x
Description
Use this command to add members to an existing access policy. The new members
must not already be members within the policy or the command fails.
Each policy corresponds to a management method. The list of members of a
policy acts as an access control list for that management method. When security is
first enabled using the secmodeenable command only the FCS_POLICY
exists. Before a policy is created, there is no enforcement for that management
method, that is, all access is granted. After a policy has been created and a
member has been added to the policy, that policy becomes closed to all access
except from included members. If all members are then deleted from the policy,
all access is denied for that management access method (the DCC_POLICY and
OPTIONS_POLICY are exceptions).
Note: When security is enabled, this command can only be issued from the Primary
FCS switch. See “Security Commands” on page 941.
secpolicyadd