> # Configuring Roles and Profiles

> ## Detailed Steps

> Note Only users belonging to the network-admin role can create roles.

> To create an additional role or to modify the profile for an existing role using DCNM-SAN, follow these steps:

> 1. Expand Switches > Security and then select Users and Roles from the Physical Attributes pane.
> 2. Click the Roles tab in the Information pane.
> 3. Click Create Row to create a role in DCNM-SAN.
> 4. Select the switches on which to configure a role.
> 5. Enter the name of the role in the Name field.
> 6. Enter the description of the role in the Description field.
> 7. (Optional) Check the Enable check box to enable the VSAN scope and enter the list of VSANs in the Scope field to which you want to restrict this role.
> 8. Click Create to create the role.

> Note Device Manager automatically creates six roles that are required for Device Manager to display a view of a switch. These roles are system, snmp, module, interface, hardware, and environment.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.