HP 3PAR InForm OS 3.1.1 CLI Administrator's Manual

NOTE: The first HP 3PAR Storage System user account created must have a role with the right
to create additional users. If the first user created has limited rights the ability to configure the
system will be restricted.
:
The <object_set>_set rights include the right to remove the object. For example, the
vvset_set right includes the right to remove virtual volume sets.
NOTE: If you are using HP 3PAR Virtual Domains for access control, you must assign users a
domain you created in your system or the all domain. See “Managing HP 3PAR Virtual Domains”
(page 62) for instructions on creating domains. For more information about domains, see the HP
3PAR InForm OS Concepts Guide.
• To create a new user, issue the createuser -c|-e <password> <user_name>
<domain_name> <role> command, where:
◦ -c|-e <password> is either a clear-text (-c) or encrypted (-e) password. A clear-text
password must be between 6 and 8 characters in length. An encrypted password must
be less than or equal to 31 characters in length. Encrypted passwords are generated by
the system. If no password is specified using -c or -e, then you are prompted to enter
a clear-text password.
◦ <user_name> is the name of the CLI account user. The user name can be up to 31
characters long. Valid characters include alphanumeric characters, the period symbol
(.), dash symbol (-), and underscore symbol (_). The first character must be alphanumeric
or an underscore symbol for users connecting to the system with the InForm OS CLI
application. To access the system with an SSH connection, the first character of the user
name must be alphanumeric.
◦ <domain_name> is the name of the domain to which the user will belong. The domain
name can be up to 31 characters long. If you are not using Virtual Domains, specify the
all domain. If you are using Virtual Domains, specify the name of an existing domain
in your system.
NOTE: The Super, Create, Basic Edit, 3PAR AO, and 3PAR RM roles cannot be restricted and
always belong to the all domain.
• <role> is the role assigned to the user. Valid values include browse, edit, super,
service, create, basic_edit, 3PAR_AO, and 3PAR_RM. The roles and rights assigned
to the CLI user determine which tasks a user can perform with a system. For information about
viewing the roles and rights defined on a system, see “Viewing User Roles and Rights”
(page 47). To view a list of roles and all of the rights assigned to the roles, see “Mapping
Roles and Rights” (page 151).
You can verify the creation of a new user with the showuser command.
Viewing Users
If you are using Virtual Domains, users with the Super, Create, Basic Edit, 3PAR AO, and 3PAR
RM roles can view all system users across all domains. If the user belongs to a specific domain,
the user can only view other users within the same domain.
If you are not using Virtual Domains, the output of the showuser command still displays a Domain
column. By default, users in systems not using Domains fall into the all domain.
Viewing Users 23