Configuring Resource Access Policies; Configuring The Interface Policy Of A User Role; Configuring The Vlan Policy Of A User Role - HP 10500 Series Configuration Manual

Configuring resource access policies

Every user role has one interface policy, VLAN policy, and VPN instance policy. By default, these policies
permit user roles to access any interface, VLAN, and VPN instance. You can configure the policies of a
user-defined user role or a predefined level-n user role to limit its access to interfaces, VLANs, and VPN
instances. The policy configuration takes effect only on users who are logged in with the user role after
the configuration.

Configuring the interface policy of a user role

Step
1. Enter system view.
2. Enter user role view.
3. Enter user role interface
policy view.
4. (Optional.) Specify a list of
interfaces accessible to the
user role.

Configuring the VLAN policy of a user role

Step
1. Enter system view.
2. Enter user role view.
3. Enter user role VLAN policy
view.
4. (Optional.) Specify a list of
VLANs accessible to the
user role.
Command
system-view
role name role-name
interface policy deny
permit interface interface-list
Command
system-view
role name role-name
vlan policy deny
permit vlan vlan-id-list
22
Remarks
N/A
N/A
By default, the interface policy of the
user role permits access to all
interfaces.
This command denies the access of the
user role to all interfaces if the permit
interface command is not configured.
By default, no accessible interfaces
are configured in user role interface
policy view.
Repeat this step to add more
accessible interfaces.
Remarks
N/A
N/A
By default, the VLAN policy of the user
role permits access to all VLANs.
This command denies the access of the
user role to all VLANs if the permit vlan
command is not configured.
By default, no accessible VLANs are
configured in user role VLAN policy
view.
Repeat this step to add more
accessible VLANs.