lsauth

Use the lsauth command to list the name, authorization level, and session permission for each user or user group.

Syntax

Read syntax diagramSkip visual syntax diagramlsauth-help-h-?-s-l-fmtdefaultxmldelim-delimcharstanza-ponoff-hdronoff-rnumber-voffon

Parameters

-help | -h | -?
Lists help for the command. If you specify additional parameters and arguments, those parameters and arguments are ignored.
-s
Displays default information about each user and user group, including the name, classification, and role.
-l
Displays detailed information for each user and user group, including:
Column label Details
User name The user name for each authorization and session that the user has permission to manage.
Classification The type: User, Group, LDAP user, LDAP group, or Unknown user.
Role The role: Administrator, Operator, or Monitor, Automation, or User Administrator.
Session The session name if the role is Operator, All Sessions if the user was set to manage all sessions, or a dash (-) if the role is Administrator, Monitor, Automation, or User Administrator.
Email The email for the specified user. If no email is set none will be displayed.

If LDAP/AD is used, the email will be listed as Defined in LDAP/AD.

GUI Access When set to Yes the user has the authority to login to the GUI.
CLI Access When set to Yes the user has the authority to login to the CLI.
Only Run Tasks

When set to Yes the user will only be allowed to run scheduled tasks.

Note: When this option is set, GUI Access will automatically be set to No.
-fmt { default | xml | delim | stanza }
Specifies the format of the output. You can specify one of these values:
default
Specifies that the output is displayed in tabular format using spaces as delimiters between columns. This is the default value.
xml
Specifies that the output is displayed in XML format.
delim
Specifies that output is displayed in a tabular format using commas as delimiters between columns.
To use a character other than a comma as the delimiter, specify -fmt delim -delim char , where char represents the character that you want to use as the delimiter. For example, if you want to use a colon (:) as the delimiter, use the following -fmt parameter:
-fmt delim -delim :
If you use a shell metacharacter as the delimiting character, enclose the character in quotation marks or single quotation marks. A blank space is not a valid character.
stanza
Specifies that the output is displayed as one keyword-value pair per line.
-p { on | off }
Specifies whether to display one page of text at a time or all text at once.
on
Displays one page of text at a time. Pressing any key displays the next page. This is the default value when the command is run in interactive mode.
off
Displays all text at once. This is the default value when the command is run in single-shot mode.
-hdr { on | off }
Specifies whether to display the table header. You can specify one of these values:
on
Displays the table header. This is the default value.
off
Hides the table header.
-r number
Specifies the number of rows per page to display when the -p parameter is specified. You can specify a value of 1 - 100. The default value is 22.
-v { on | off }
Specifies whether to enable verbose mode. You can specify one of these values:
on
Enables verbose mode.
off
Disables verbose mode. This is the default value.

Example: Listing all users and user groups

The following command lists all currently defined users and user groups.

csmcli> lsauth

The following output is returned:

Name    Classification Role
====================================
csmuser User           Administrator

Example: Listing detailed authorization information

The following command lists detailed information about the user csmuser.

csmcli> lsauth -l

The following output is returned:

Name    Classification Role          Session  Email  GUI Access CLI Access Only Run Tasks
============================================================================================================
csmuser User           Administrator                   -        None   Yes        Yes        No