lsauth
Use the lsauth command to list the name, authorization level, and session permission for each user or user group.
Syntax
Parameters
- -help | -h | -?
- Lists help for the command. If you specify additional parameters and arguments, those parameters and arguments are ignored.
- -s
- Displays default information about each user and user group, including the name, classification, and role.
- -l
- Displays detailed information for each user and user group, including:
Column label Details User name The user name for each authorization and session that the user has permission to manage. Classification The type: User, Group, LDAP user, LDAP group, or Unknown user. Role The role: Administrator, Operator, or Monitor, Automation, or User Administrator. Session The session name if the role is Operator, All Sessions if the user was set to manage all sessions, or a dash (-) if the role is Administrator, Monitor, Automation, or User Administrator. Email The email for the specified user. If no email is set none will be displayed. If LDAP/AD is used, the email will be listed as Defined in LDAP/AD.
GUI Access When set to Yes the user has the authority to login to the GUI. CLI Access When set to Yes the user has the authority to login to the CLI. Only Run Tasks When set to Yes the user will only be allowed to run scheduled tasks.
Note: When this option is set, GUI Access will automatically be set to No. - -fmt { default | xml | delim | stanza }
- Specifies the format of the output. You can specify one of these values:
- default
- Specifies that the output is displayed in tabular format using spaces as delimiters between columns. This is the default value.
- xml
- Specifies that the output is displayed in XML format.
- delim
- Specifies that output is displayed in a tabular format using commas as delimiters between columns.
- stanza
- Specifies that the output is displayed as one keyword-value pair per line.
- -p { on | off }
- Specifies whether to display one page of text at a time or all text at once.
- on
- Displays one page of text at a time. Pressing any key displays the next page. This is the default value when the command is run in interactive mode.
- off
- Displays all text at once. This is the default value when the command is run in single-shot mode.
- -hdr { on | off }
- Specifies whether to display the table header. You can specify one of these values:
- on
- Displays the table header. This is the default value.
- off
- Hides the table header.
- -r number
- Specifies the number of rows per page to display when the -p parameter is specified. You can specify a value of 1 - 100. The default value is 22.
- -v { on | off }
- Specifies whether to enable verbose mode. You can specify one of these values:
- on
- Enables verbose mode.
- off
- Disables verbose mode. This is the default value.
Example: Listing all users and user groups
The following command lists all currently defined users and user groups.
csmcli> lsauth
The following output is returned:
Name Classification Role ==================================== csmuser User Administrator
Example: Listing detailed authorization information
The following command lists detailed information about the user csmuser.
csmcli> lsauth -l
The following output is returned:
Name Classification Role Session Email GUI Access CLI Access Only Run Tasks ============================================================================================================ csmuser User Administrator - None Yes Yes No