The policy role is a container that holds all aspects of policy configuration for a specific role. Policy roles are identified by a numeric profile-index value between 1 and the maximum number of roles supported on the platform. Policy roles are configured using the configure policy profile command. Policy configuration is either directly specified with the configure policy profile command or is associated with the role by specifying the profile-index value within the command syntax where the given policy option is configured. For example, when configuring a policy maptable entry using the configure policy maptable command (see VLAN to Policy Mapping), the command syntax requires that you identify the policy role the maptable entry will be associated with, by specifying the profile-index value.
When modifying an existing policy role the default behavior is to replace the existing role with the new policy role configuration. Use the append option to limit the change to the existing policy role to the options specified in the entered command.
A policy role can also be identified by a text name of between 1 and 64 characters. This name value is used by the RADIUS (Remote Authentication Dial In User Service) filter-ID attribute to identify the policy role to be applied by the switch with a successful authentication.