6.0

Table Of Contents
Getting Started with vSphere Command-Line Interfaces
102 VMware, Inc.
Options
Thevicfg-usercommandspecificoptionsmanipulateusers.Youmustalsospecifyconnectionoptions.See
“ConnectionOptionsforvCLIHostManagementCommands”onpage 18.
Managing Users with vicfg-user
AuserisanindividualauthorizedtologintoanESXiorvCenterServersystem.
vSpheredoesnotexplicitlyrestrictuserswiththesameauthenticationcredentialsfromaccessingandtaking
actionwithinthevSphereenvironmentsimultaneously.
YoumanageusersdefinedonthevCenterServersystemandusersdefinedonindividualhosts
separately.
ManageusersdefinedonESXiwiththevSphereClient,thevSphereWebServicesSDK,orvicfg-user.
ManagevCenterServeruserswiththevSphereClient,thevSphereWebClient,orthevSphereWeb
ServicesSDK.
EveniftheuserlistsofahostandavCenterServersystemappeartohavecommonusers(forinstance,auser
calleddevuser),theseusersareseparateuserswiththesamename.
TheattributesofdevuserinvCenter
Server,includingpermissions,passwords,andsoforth,areseparatefromtheattributesofdevuserontheESXi
host.IfyoulogintovCenterServerasdevuser,youmighthavepermissiontoviewanddeletefilesfroma
datastore.Ifyouloginto
anESXihostasdevuser ,youmightnothavethesepermissions.
UsersauthorizedtoworkdirectlyonanESXihostareaddedtotheinternaluserlistwhenESXiisinstalledor
canbeaddedbyasystemadministratorafterinstallation.Youcanusevicfg-usertoaddusers,removeusers,
change
passwords,andconfigurepermissions.
I
MPORTANTIfyoucreateauserwiththevSphereClient,youcannotmakechangestothatuserwiththe
vicfg-usercommand.
Option Description
--adduser <user_list>
-u <user_list>
Addsthespecifiedusers.Takesacommaseparatedlistofusers.
--entity <user>
-e <user>
Entitytoperformtheoperationon.StartingwithvSphere5.1,entityis
alwaysuser.
--login <login_id>
-l <login_id>
LoginIDoftheuser.
--newpassword <p_wd>
-p <p_wd>
Passwordforthetargetuser.
--newuserid <UUID>
-i <UUID>
NewUUIDforthetargetuser.
--newusername <name>
-n <name>
Newusername
forthetargetuser.
--operation
-o
Operationtoperform.Specifyadd,modify,delete,orlist.
--role <admin|read-only|no-access>
-r <admin|read-only|no-access>
Roleforthetargetuser.Specifyoneofadmin,read-only,orno-access.
Usersthatyoucreatewithoutassigningpermissionshavenopermissions.
--shell
-s
Grantshellaccesstothetargetuser.Defaultisno
shellaccess.Usethis
commandtochangethedefaultortorevokeshellaccessrightsafterthey
havebeengranted.
Validvaluesareyesandno.
ThisoptionisnotsupportedagainstvSphere5.0systems.Theoptionis
supportedonlyagainstESX.TheoptionisnotsupportedagainstESXi.
IMPORTANTYoucannotmodifyuserscreatedwiththevSphereClientwiththevicfg-usercommand.