aaa.aaa_role

An AAA role is a set of attributes and privileges that describe what a user is authorized to perform.

ACI class	aaaRole
RN	role-{name}
Cursor	AaaRoleCursor
Parent	aaa
Atomic	—

Attributes

Accepted as keyword arguments of .aaa_role(name) and of .set(**attrs) on this cursor. Enum parameters also accept the plain string.

parameter	wire	type	values	default	description
name (positional)	name	str	—	—	The name of the privilege role.
description	descr	str	—	—	Specifies a description of the policy definition.
owner_key	ownerKey	str	—	—	The key for enabling clients to own their data for entity correlation.
owner_tag	ownerTag	str	—	—	A tag for enabling clients to add their own data. For example, to indicate who created this object.
privilege	priv	AaaAccess	none, admin, aaa, tenant-connectivity, tenant-protocol, vmm-policy, tenant-ext-connectivity, tenant-ext-protocol, tenant-qos, tenant-security, tenant-network-profile, tenant-epg, fabric-connectivity, fabric-protocol, fabric-equipment, access-connectivity, access-protocol, access-equipment, access-qos, nw-svc-params, ops, nw-svc-policy, site-admin, site-policy, config-manager, custom-privilege-1, custom-privilege-2, custom-privilege-3, custom-privilege-4, custom-privilege-5, custom-privilege-6, custom-privilege-7, custom-privilege-8, custom-privilege-9, custom-privilege-10, custom-privilege-11, custom-privilege-12, custom-privilege-13, custom-privilege-14, custom-privilege-15, custom-privilege-16, custom-privilege-17, custom-privilege-18, custom-privilege-19, custom-privilege-20, custom-privilege-21, custom-privilege-22, custom-port-privilege	—	The privilege(s) assigned to a role.
trigger_reset_to_factory_settings	resetToFactory	AaaBoolean	no, yes	no	—