Reference (Supporting Fabric OS v7.3.0) Owner manual

1188 Fabric OS Command Reference
53-1003131-01
userConfig
2
-c
Displays a list of users who have permission to execute chassis commands.
--add | --change
Creates a new user account or modifies an existing user account. The following
restrictions apply when you create or modify a user account:
• You cannot change the role, the Admin Domain or Logical Fabric
permissions, the home Admin Domain or the home Logical Fabric of any
default account.
• You cannot change the role, the Admin Domain or Logical Fabric
permissions, or the description of accounts at the same or a higher
authorization level.
• You cannot change the role, the Admin Domain or Logical Fabric
permissions, or the home Admin Domain or home Logical Fabric of your own
account.
• No account can disable itself.
• Admin Domain or Logical Fabric permissions must be a subset of the
respective Admin Domain or Logical Fabric permissions of the account that
creates or modifies a user account.
• In an Logical Fabric-enabled environment, you can change the role
associated with existing Logical Fabrics but you cannot add new Logical
Fabrics or delete any existing Logical Fabrics.
• The account name cannot be the same an existing user account, a default
role, a user-defined role, or a system role. System roles are used by internal
switch processes and include the following: bin, daemon, sys, adm, tty, disk,
lp, mem, kmem, wheel, mail, news, uucp, man, dip, ftp, nobody, users, floppy,
console, utmp, and slocate. If the specified username already exists, this
command fails with an appropriate message. Choose a different username
and reissue the command.
The following operands are supported with the --add and --change option
username
Specifies the login name of the account to be created or modified. Enter a valid
login name to modify an existing account. For new accounts, the name must be
unique and must begin with an alphabetic character. User names are
case-sensitive and can contain up to 32 alphanumeric characters, including
periods (.) and underscore (_) characters. For backward compatibility with
releases prior to Fabric OS v7.3.0, the username with 40 characters is supported
through configDownload and password distribution from switches.
-r role
In an Admin Domain-enabled environment, this operand specifies the role for the
account. In an Logical Fabric-enabled environment, this operand specifies the
account's role for all Logical Fabrics provided with the Logical Fabric list. When
you create a user account in an Logical Fabric-enabled environment, you can
specify only one role for the user. This role is associated with each of the Logical
Fabric IDs in the specified LF_ID_list. Once the account is created, you can use
the --addlf option to create another list of Logical Fabric IDs with its own set of
associated roles.
You can assign any role to the account, user-defined or default. Use the
roleconfig --show command for a listing of valid roles. This operand is required
with the --add option; it is optional with the --change option.
-h AD_ID | LF_ID
Specifies the home Administrative Domain or the home Logical Fabric depending
on the environment. This operand is optional. If no Admin Domain or Logical
Fabric is specified with the --add option, the system assigns the lowest numbered
Admin Domain or Logical Fabric the user is authorized to access.