Equivalent command for 'show privilege' in Nexus 9k(10.3(3)

[gowdakssujan]

Equivalent command for'show privilege'

 cisco Nexus9000 C93108TC-FX3P
NXOS: version 10.3(3) [Feature Release]
Host NXOS: version 10.3(3)

[Enes Simnica]

hello @gowdakssujan  Just to clarify r u asking for the equivalent of the show priviledge command on this Nexus 9000 NX-OS version? If so, the equivalent command is:

#show user-account

-Enes

[balaji.bandi]

You have roles in the nexus that is network-admin, network-operator and so on

you can use below command to see the roles :

#show roles

if you want to see what role user got it depends on Local or remote authentication, below command show what role user in.

# show user-account
user:admin
this user account has no expiry date
roles:network-admin
no password set. Local login not allowed
Remote login through RADIUS/TACACS+ is possible
account created through REMOTE authentication
Local login not possible
user: balaji_bandi
roles:network-admin
account created through REMOTE authentication

[Jens Albrecht]

Hello @gowdakssujan,

there is no direct equivalent to the 'show privilege' command because NX-OS does not use privilege levels.

Instead the Nexus switches use role-based access control (RBAC) with predefined roles.
So when you create a new user account you assign a role to this user defining what this user can do.

A typical output of the 'show user-account' command might look like this:

Nexus# show user-account 
user:NetOp
        this user account has no expiry date
        roles:network-operator 
user:NetAdmin
        this user account has no expiry date
        roles:network-admin 
user:DevOps
        this user account has no expiry date
        roles:dev-ops 
Nexus# 

The command 'show role' command gives you the details what a user with a specific role can do, e.g.:

Nexus# show role name dev-ops

Role: dev-ops
  Description: Predefined system role for devops access. This role
  cannot be modified.
  -------------------------------------------------------------------
  Rule    Perm    Type        Scope               Entity                  
  -------------------------------------------------------------------
  5       permit  command                         conf t ; username *     
  4       permit  command                         attach module *         
  3       permit  command                         slot *                  
  2       permit  command                         bcm module *            
  1       permit  command                         python *                
Nexus# 

HTH!

[MHM Cisco World]

Note: Nexus OS (NX-OS) does not use privilege levels (0–15) like IOS. Instead, it uses role-based access control (RBAC) with roles such as network-admin, network-operator, etc.

To see role of user access to nexus use 

Show user-account

MHM