> # Modifying the VSAN Policy

> ## Detailed Steps

> To modify the VSAN policy for an existing role using DCNM-SAN, follow these steps:

> 1. Expand Switches > Security and then select Users and Roles from the Physical Attributes pane.
> 2. Click the Roles tab in the Information pane.
> 3. Check the Scope Enable check box if you want to enable the VSAN scope and restrict this role to a subset of VSANs.
> 4. Enter the list of VSANs in the Scope VSAN Id List field that you want to restrict this role to.
> 5. Click Apply Changes to save these changes.

> Copyright 2010-2015, Cisco Systems, Inc. All rights reserved.