| FabricAdmin |
- Registers
devices to the fabric
- Configures
fabric parameters
- Validates all
devices in the fabric
- Configures
switches for IP fabric with overlay and without overlay
- Creates
tenants
- Creates
networks inside tenants, such as VRF, EPG, and PO
- Performs
fabric debug activities
- Has privileges for Hyper-V, and vCenter
operations
|
| SecurityAdmin |
Performs user management, PKI, and key management
operations |
| NetworkOperator |
- Has view-only
privileges for fabric configurations, information for
tenants and inventory, and all ecosystem information
- Cannot make
changes in the system
|
| SystemDebugger |
- Has
privileges to perform supportsave and system backup, and to
view the running system configurations
- Has
privileges to perform fabric debug operations
- Sets debug
levels for services
- Has
privileges to collect execution logs from services
|
| SystemAdmin |
Has complete privileges to all operations in the system |
| <Tenant>Admin * Created dynamically per
tenant
|
Performs tenant administration within the assigned tenant, such
as the following:
- Adding
networks to the tenant
- Configuring
network parameters
- Configuring
switches with tenant-specific information
Cannot perform actions for any other tenant |
