For AD users accessing the switch, you can set the user's specific roles and privileges.
Administrator or Operator to set either role and the predefined privileges for it.
None (Server Authorization) to have the user's role assigned by the active directory server.
Advanced Roles to have a customizable set of privileges assigned to the active directory user.
For more information, see User Roles and Permissions.