Users Guide
Assign user role
To limit OS10 system access, assign a role when you configure each user.
● Enter a user name, password, and role in CONFIGURATION mode.
username username password password role role
○ username username — Enter a text string. A maximum of 32 alphanumeric characters; 1 character minimum.
○ password password — Enter a text string. A maximum of 32 alphanumeric characters; 9 characters minimum.
○ role role — Enter a user role:
■ sysadmin — Full access to all commands in the system, exclusive access to commands that manipulate the file
system, and access to the system shell. A system administrator can create user IDs and user roles.
■ secadmin — Full access to configuration commands that set security policy and system access, such as password
strength, AAA authorization, and cryptographic keys. A security administrator can display security information, such
as cryptographic keys, login statistics, and log information.
■ netadmin — Full access to configuration commands that manage traffic flowing through the switch, such as routes,
interfaces, and ACLs. A network administrator cannot access configuration commands for security features or view
security information.
■ netoperator — Access to EXEC mode to view the current configuration with limited access. A network operator
cannot modify any configuration setting on a switch.
Create user and assign role
OS10(config)# username smith password silver403! role sysadmin
View users
OS10# show users
Index Line User Role Application Idle Login-Time Location
----- ---- ------ ------ ----------- ---- --------------------- -------------
1 ttyS root root -bash >24h 2018-05-23 T23:05:03Z console
2 pts/0 admin sysadmin bash 1.1s 2018-05-30 T20:04:27Z 10.14.1.214[ssh]
Linuxadmin user configuration
OS10 supports two factory-default users: admin and linuxadmin. Use the admin user name to log in to the command-line
interface. Use the linuxadmin user name to access the Linux shell.
To manage the default linuxadmin user from the CLI, you can:
● Configure a lost or forgotten linuxadmin password.
● Disable the linuxadmin user.
NOTE:
These tasks allow you to manage only the default linuxadmin user, not other Linux users created at the root
level.
Configure linuxadmin password from CLI
To configure a password for the linuxadmin user, use the system-user linuxadmin password {clear-text-
password | hashed-password} command in CONFIGURATION mode. Save the new password using the write memory
command. For example:
OS10(config)# system-user linuxadmin password Dell@admin10!@
OS10(config)# exit
OS10# write memory
OS10(config)# system-user linuxadmin password $6$3M55wOYy
$Sw1V9Ok3GE4Hmf6h1ARH.dBHy9gpEFYUvdu15ZpnCYzt.nJjFm0VIz/rQvvJeX6krRtfYs2ZqBl6TkmLGAwtM
OS10(config)# exit
OS10# write memory
The linuxadmin password configured from the CLI takes precedence across reboots over the password configured from the
Linux shell.
1324
Security