6.5

Table Of Contents
Full Name -: root
UID -: 0
Shell Access -> 1
-------------------
...
--------------------
Principal -: user27
Full Name -:
UID -: 501
Shell Access -> 0
4 Modify the password for user user27.
vicfg-user <conn_options> -e user -o modify -l user27 -p 27_password2
The system might return Updated user user27 successfully.
5 Assign read-only privileges to the user, who currently has no access.
vicfg-user <conn_options> -e user -o modify -l user27 --role read-only
The system prompts whether you want to change the password, which might be advisable if the user
does not currently have a password. Answer y or n. The system then updates the user.
Updated user user27 successfully.
Assigned the role read-only
6 Remove the user with login ID user27.
vicfg-user <conn_options> -e user -o delete -l user27
The system removes the user and prints a message.
Removed the user user27 successfully.
Assigning Permissions with ESXCLI
You can use ESXCLI commands to manage permissions.
Starting with vSphere 6.0, a set of ESXCLI commands allows you to perform the following operations.
n
Give permissions to local users and groups by assigning them one of the predened roles.
n
Give permissions to Active Directory users and groups if your ESXi host has been joined to an Active
Directory domain by assigning them one of the predened roles.
I When you manage local users on your ESXi host, you are not aecting the vCenter Server
users.
Example: Manage Permissions
You can list, remove, and set permissions for a user or group, as shown in the following example.
1 List permissions.
esxcli system permission list
vSphere Command-Line Interface Concepts and Examples
120 VMware, Inc.