Reference Guide

Run the userConfig --add todUser command to add time-based users.
switch:admin> userconfig --add toduser -r user –l 1-128 –h 128 –c user –d “Time of day User” –at
hh:mm-hh:mm
The first instance of hh:mm after the "-at" option indicates the start time and the second instance indicates the end time. To
downgrade to a previous Fabric OS version, you need to remove the time-based user configuration.
WARNING
The time of access must not be configured for switch default accounts such as root or admin user as it can lock you
out of the switch access completely. To provide accessibility to the switch, you must have at least one account without
the time of access configured.
Local database user accounts
User add, change, and delete operations are subject to the
subset
rule: an admin with LFlist 1-10 cannot perform operations on an
admin
,
user
, or any role with LFlist 11-128. The user account being changed must have an LFlist that is a subset of the account that is making the
change.
In addition to the default administrative and user accounts, Fabric OS supports up to 252 user-defined accounts in each switch
(domain). These accounts expand your ability to track account access and audit administrative activities.
Default accounts
The following table lists the predefined accounts offered by Fabric OS that are available in the local-switch user database. The password
for all default accounts should be changed during the initial installation and configuration of each switch.
TABLE 23 Default local user accounts
Account name Role Logical Fabric Description
admin Admin LF1-128
home: 128
Most commands have
observe/
modify
permission
root Root LF1-128
home: 128
Reserved
user User LF-128
home: 128
Most commands have
observe-
only
permission
Virtual Fabrics considerations: Administrators can act on other accounts only if that account has a Logical Fabric list that is a subset of
the administrator.
Root user access settings:
Root access is disabled by default and restricted to the console only. To enable the root account use the userconfig --change
root -e yes command.
Root access is allowed only through the console. Use the rootAccess --set <none|consoleonly|all> command to change the root
access settings.
The default root password must be changed in the first login.
For all users, an astreix (*) is displayed next to the username if the password is still at default, when you run userConfig -show command.
Managing User Accounts
Brocade Fabric OS Administration Guide, 8.0.1
53-1004111-02 149