role condition

Function

The role condition command configures the conditions for a role to pass the host check policy.

Format

role role-name condition { all | any }

Parameters

Parameter	Description	Value
role-name	Specifies the role name.	The value must be an existing role name.
all	Indicates that the user needs to pass all the host check policies associated with the role to access the resources in the role when the user logs in to the virtual gateway.	-
any	Indicates that the user only needs to pass any of the host check policies associated with the role to access the resources in the role when the user logs in to the virtual gateway.	-

Views

Role view

Default Level

2: Configuration level

Usage Guidelines

By default, the user needs to pass all the host check policies associated with the role to access the resources in the role when the user logs in to the virtual gateway.

Example

# Configure the condition that the user needs to pass all the host check policies associated with the role to access the resources in the role when the user logs in to the virtual gateway.

<sysname> system-view
[sysname] v-gateway abc
[sysname-abc] role
[sysname-abc-role] role role1 condition all