6.0

Table Of Contents
Getting Started with vSphere Command-Line Interfaces
104 VMware, Inc.
6RemovetheuserwithloginIDuser27.
vicfg-user <conn_options> -e user -o delete -l user27
Thesystemremovestheuserandprintsamessage.
Removed the user user27 successfully.
Assigning Permissions with ESXCLI
StartingwithvSphere6.0,asetofESXCLIcommandsallowsyouto:
Givepermissionstolocalusersandgroupsbyassigningthemoneofthepredefinedroles.
GivepermissionstoActiveDirectoryuserandgroupsifyourESXihosthasbeenjoinedtoanActive
Directorydomainbyassigningthemoneofthepredefinedroles.
Youcanlist,remove,andsetpermissionsforauserorgroup,asshowninthefollowingexample.
1Listpermissions.
esxcli system permission list
Thesystemdisplayspermissioninformation.Thesecondcolumnindicateswhethertheinformationisfor
auserorgroup.
Principal Is Group Role
-----------------------------------
ABCDEFGH\esx^admins true Admin
dcui false Admin
root false Admin
vpxuser false Admin
test1 false ReadOnly
2Setpermissionsforauserorgroup.SpecifytheIDoftheuserorgroup,andsetthe--groupoptionto
truetoindicateagroup.Specifyoneofthreeroles,Admin,ReadOnlyandNoAccess.
excli system permission set --id test1 -r ReadOnly
3Removepermissionsforauserorgroup.
esxcli permission remove --id test1
Youcanmanageaccountswiththefollowingcommands:
esxcli system account add
esxcli system account set
esxcli system account list
esxcli system account remove
IMPORTANTWhenyoumanagelocalusersonyourESXihost,youarenotaffectingthevCenterusers.