* Create a user defined role and add the required privileges.
* Assign a role to a user. Comprehensive and Detailed Explanation: = To meet the requirements of adding a new FCoE VLAN to the core switches with restricted read-write access, the network engineer must create a user defined role and assign it to a user. A user defined role is a custom role that can be created to grant specific privileges and permissions to a user, based on the tasks and functions they need to perform. A user defined role can be created using the role command, and then the required privileges can be added using the rule command. For example, to create a role named FCoE-admin and add the privilege to configure FCoE VLANs, the following commands can be used:
role FCoE-admin rule 1 permit read-write feature fcoe rule 2 permit read-write feature vlan After creating the user defined role, it can be assigned to a user using the username command. For example, to assign the FCoE-admin role to a user named John, the following command can be used:
username John role FCoE-admin
By creating and assigning a user defined role, the network engineer can ensure that the user has the minimum required privileges to perform the FCoE VLAN configuration, without granting them full network-admin access or modifying the existing roles. References :=
* Implementing and Operating Cisco Data Center Core Technologies (DCCOR) v1.2, Module 3: Data Center LAN Network Connectivity, Lesson 3.5: Cisco Nexus 7000 Series Switches
* Cisco Nexus 7000 Series NX-OS Security Configuration Guide, Release 6.x, Chapter: Configuring User Accounts and RBAC, Section: Configuring User-Defined Roles