Command Reference Guide

996 Fabric OS Command Reference
53-1001764-02
userConfig
2
-l LF_ID For each LF in LF_ID_list, displays a list of users that include that LF in their
LFF permissions. Specify a range (1-5), or a list of LF_IDs separated by a
comma (1,2,3), or a combination of both (1-5,7). Only users with
SecurityAdmin or Admin role may execute this command.
-c Displays a list of users who have permission to execute chassis commands.
--add |--change Creates a new user account or modifies an existing user account. The
following restrictions apply when you create or modify a user account:
• You cannot change the role, the AD or LF permissions, the home AD or
the home LF of any default account.
• You cannot change the role, the AD or LF permissions, or the description
of accounts at the same or a higher authorization level.
• You cannot change the role, the AD or LF permissions, or the home AD or
home Logical Fabric of your own account.
• No account can disable itself.
• AD or LF permissions must be a subset of the respective AD or LF
permissions of the account that creates or modifies a user account.
• In an LF-enabled environment, you can change the role associated with
existing LFs but you cannot add new LFs or delete any existing LFs.
The following operands are supported with the --add and --change options:
username Specifies the login name of the account to be created or modified. Enter a
valid login name to modify an existing account. For new accounts, the name
must be unique, between 8 and 40 characters long, and must begin with an
alphabetic character. User names are case-sensitive and can contain
alphanumeric characters, periods (.), and underscore (_) characters. The
account name cannot be the same as a role name.
-r role In an AD-enabled environment, this operand specifies the role for the
account. In an LF-enabled environment, this operand specifies the account's
role for all LFs provided with the LF list. When you create a user account in an
LF-enabled environment, you can specify only one role for the user. This role
is associated with each of the LF IDs in the specified LF_ID_list. Once the
account is created, you can use the --addlf option to create another list of LF
IDs with its own set of associated roles.
Valid roles are: User, SwitchAdmin, ZoneAdmin, FabricAdmin,
BasicSwitchAdmin, Operator, or Admin. This operand is required with the
--add option; it is optional with the --change option.
-h AD_ID | LF_ID
Specifies the home Administrative Domain or the home Logical Fabric
depending on the environment. This operand is optional. If no AD or LF is
specified with the --add option, the system assigns the lowest numbered AD
or LF the user is authorized to access.