Device Attributes

User role introduces a sub level context called 'device' in the user role context for defining the device level attributes along with other user authentication attributes. This enhancement facilitates the downloading the user-role from ClearPass and commands (for local user roles) for the new attributes that applies for a specific user role.

You can use this feature for AP onboarding where port-mode and vlan-id-tagged support is required. The attribute admin-edge-port will result in the faster bring up of the port without waiting for Spanning Tree. The Power-over-Ethernet (PoE) attribute provides support for PoE capable devices. It helps to manage the PoE devices in the user role to allocate the power based by device class and to have a priority control mechanism that prevents higher power consumption.