Performing user management using CLISH

The following administrator roles are included with Access Appliance:

Master
System Administrator
Storage Administrator

You can add additional users with these roles. To add the different administrator roles, you must have master privilege.

Note:

When adding a new user, you must assign a password.

To add a user with specific privileges

Enter the following to add a user with specific privileges:
```
Admin> user add username role
```
where role is the role that you want to assign to the user.

Note:

The AD username cannot contain space.

To delete a user

Enter the following to delete a specified user from the current system.
```
Admin> user delete username
```

To change a user's password

Enter the following command to change the password for the current user:
```
Admin> passwd
```
You are prompted to enter the old password first. If the password matches, then you are prompted to enter the new password for the current user.
Enter the following command to change the password for a user other than the current user:
```
Admin> passwd [username]
```
You are prompted to enter the old password first. If the password matches, then you are prompted to enter the new password for the user.
Note:
A user that does not have master role (Appliance Administrator role) cannot change the password via command-line interface (by connecting to a node using SSH and accessing the command-line interface). The user must log in to the Access Appliance GUI and change the password.
To change the default password of the sysadmin user (IPMI user account), enter the following command:
```
Admin> ipmi passwd username old_password new_password
```
where username is sysadmin

To display a list of current users

Enter the following to display the current user:
```
Admin> show [username]
```
Enter the following to display a list of all the current users:
```
Admin> show
```
Enter the following to display the details of the administrator with the user name master:
```
Admin> show master
```

To add master role to a local or domain user

Enter the following to add a user role to Access Appliance:
```
Admin> user modify role add username role domain
```
where domain can be local, ad or ldap.
- Domain is an optional argument with the default value as local.
- For local user, only the username is required.
- You can assign only a master role to LDAP and AD users.
- For AD, enter domain\\username.
- For LDAP, enter username.

To delete a master role from a local or domain user

Enter the following to delete the master role from a user account:
```
Admin> user modify role delete username	role domain
```

To add a role to a domain group

Enter the following to add a role to a specific domain group:
```
Admin> group modify role add groupname role domain
```
where domain can be ad or ldap.

Note:

The AD group name cannot contain a space.

For AD, enter domain\\groupname.
For LDAP, enter groupname.

To remove a role from a domain group

Enter the following to delete the specified role from a specific domain group:
```
Admin> group modify role delete groupname role	domain
```
where domain can be ad or ldap.

Note:

If the domain user is AD or LDAP, then you must configure NSS for that user using the Network nsswitch conf command. For an LDAP user, the NSS lookup should be set to ldap and for an AD user, the NSS lookup should be set to winbind. For more information,

Performing user management using CLISH

Feedback

Feedback