User Manual

NETGEAR M4500 Series Switches CLI Command Reference Manual 621
One user could have many roles and there isn’t any different priority between roles. However, if rules are
conflicting between roles, the rule that is “permit” action will be higher priority than another rule that is “deny”
action.
For example, below User1 has role1 and role2, therefore, User1 can show all related commands of “ip igmp”.
Since rule1 of role2 conflicts to rule1 of role1 and “permit” action is higher priority, the rule1 of role2 is invalid.
Switch(config)# role name role1
Switch(config-role)# rule 1 permit command “show ip igmp *”
Switch(config)# role name role2
Switch(config-role)# rule 1 deny command “show ip igmp groups *”
Switch(config)# username User1 role role1
Switch(config)# username User1 role role2
5.31.1. role based access control enable
This command is used to enable RBAC function.
When enabling RBAC function, only users who have the role 'network-admin' will build rule merged table
immediately, other login users won't allow to execute any CLI command until he logout and login again to
rebuild its rule merged table.
Format role based access control enable
Default Disabled
Mode Global Config
5.31.2. no role based access control enable
This command is used to disable RBAC function.
Format no role based access control enable
Mode Global Config
5.31.3. role name
This command is used to create a new role or configure an existing role.