Infrastructure management using the HP SIM command line interface (436331-002, January 2009)

Managing users
The mxuser command enables you to add, modify, remove, or list users in HP SIM. A full description
for mxuser exists in the mxuser man page, and a full description of the XML syntax required to
manage users with an XML file exists in the mxuser(4) man page.
The mxuser –a user command adds the user with the login name of user to HP SIM. The user must
exist as a user on the operating system to log in to HP SIM, but does not need to exist to be added to
HP SIM. In this example, the user has limited access rights and no authorizations.
• The -d description option enables you to provide a description of the user, such as the user
role, like Database Administrator, or HPUX Server Manager. For example:
# mxuser –a Jane –d “HPUX Administrator”
• The -p full CMSSecurity | limited | none option enables you to specify the rights of
the user. A full rights user has unlimited access HP SIM capabilities. A limited rights user can create
tools in HP SIM, and none rights user, has access to the listing options of HP SIM commands.
• The -C source option is useful when creating several users with the same authorizations. For
more information, see Managing authorizations.
• The -g userGroup option can replace user in the -a option to create a user group. Use the -d
and -p options to provide a description and access rights for the group.
• The -m user option, used in conjunction with -d and -p, enables you to modify the description
and access rights of the user. In the example above, to modify Jane’s description, the command will
look like:
# mxuser –m Jane –d “Database Administrator”
Using -m –g userGroup, in conjunction with -d and -p, modifies the characteristics of group
userGroup.
• The mxuser –r user and mxuser –r –g userGroup commands remove a user and a group,
respectively, deleting all authorizations for the user and the group.
• The -f file option enables you to add, modify, or remove multiple users and user groups. File
contains XML syntax, allowing multiple entries to be processed. Use this option with -a, -m, and –
r options, replacing the user name or user group name with -f file. Another benefit to using a
file is that you can define more characteristics for the users and groups. For example, you can
specify e-mail and phone contact information for each user. For details on the XML syntax, see the
mxuser(4) man page.
There are several ways to display user information on the screen. You can also save user information
in an XML-formatted file.
# mxuser –l t ; displays the user name, rights, and description in
tabular format
# mxuser –l d ; displays all user information in a screen-viewable format
# mxuser –l n ; displays only the user names
# mxuser –l f ; displays all user information in XML format
For each of the -l options, you can specify one or more user names and one or more user group
names to get the information for only those users and user groups. For example:
# mxuser –l d Jane Bob
This example displays the details of users Jane and Bob.
Managing system groups
If a user or a set of users are managing several systems, place them in a system group. This enables
you to create authorizations for the users using a single command. For more information, see
20