Brocade Communications Systems 53-1001763-02 User assignments to Admin Domains

346 Fabric OS Administrator’s Guide
53-1001763-02
Admin Domain management for physical fabric administrators
15
5. Enter the ad --create command using the -d option to specify device and switch port members
and the -s option to specify switch members:
ad --create ad_id -d "dev_list" -s "switch_list"
6. Enter the appropriate command based on whether you want to save or activate the Admin
Domain definition:
•To save the Admin Domain definition, enter ad --save.
•To save the Admin Domain definition and directly apply the definition to the fabric, enter ad
--apply.
7. Set up zones in the newly created Admin Domain. See Chapter 11, “Administering Advanced
Zoning,” for instructions.
Example 1
The following example creates Admin Domain AD1, consisting of two switches, which are
designated by domain ID and switch WWN.
switch:AD255:admin> ad --create AD1 -s "97; 10:00:00:60:69:80:59:13"
Example 2
The following example creates Admin Domain “blue_ad,” consisting of two switch ports
(designated by domain,index), one device (designated by device WWN), and two switches
(designated by domain ID and switch WWN).
switch:AD255:admin> ad --create blue_ad –d "100,5; 1,3;
21:00:00:e0:8b:05:4d:05; –s "97; 10:00:00:60:69:80:59:13"
User assignments to Admin Domains
After you create an Admin Domain, you can specify one or more user accounts as the valid
accounts who can use that Admin Domain. User accounts have the following characteristics with
regard to Admin Domains:
•A user account can only have a single role.
You can choose roles from one of the seven types of roles, either the existing user and
administrator role or one of the other RBAC roles.
•You can configure a user account to have access to the physical fabric through AD255 and to a
list of Admin Domains (AD0–AD254).
•You can configure a user account to have access to only a subset of your own Admin Domain
list. Only a physical fabric administrator can create another physical fabric administrator user
account.
•Users capable of using multiple Admin Domains can designate one of these Admin Domains as
the home Admin Domain, which is the default Admin Domain context after login.
•If you do not specify one, the home Admin Domain is the lowest valid Admin Domain in the
numerically-sorted AD list.
•Users can log in to their Admin Domains and create their own Admin Domain-specific zones
and zone configurations.