mkuser

Edit online

Use the mkuser command to create a user in the basic user registry. This command is not available when running on a z/OS® system. Note: This command can only be issued by a user with Administrator authority.

Syntax

Parameters

-help | -h | -?: Lists help for the command. If you specify additional parameters and arguments, those parameters and arguments are ignored.
-name name: Specifies a user name you want to add to the basic user registry. The user name must not exceed 104 characters in length and cannot contain spaces, tabs, or any of the following characters: " / \ [ ] : ; | = , + * ? < > ' { } $ ^ ( ) & % #
-allsessions: When authlevel is set to operator, this option indicates that the user will be authorized to manage all existing and future sessions. When set all session names specified is ignored. The option is ignored for all other authlevel values.
-password password: Specifies the password to set for the new user. Password must be a valid set of characters. If you do not include this parameter, you will be prompted for the password. If prompted, the password will be masked and you will be prompted to confirm the password by retyping it. If the parameter is used, it will display in plain text but no additional prompting will occur. The maximum password length is 104 characters.
-email email_address[,email_address]: Specifies the email addresses to be associated with the given user. Multiple email addresses can be added using a comma separated list.
allowguiaccess: If specified, and the authlevel is set to automation, this option indicates that the user will be allowed to login to the GUI. If not specified, and the authlevel is set to automation, the user will not be allowed to login to the GUI. This property is ignored if the authlevel is not set to automation.
allowcliaccess: If specified, and the authlevel is set to automation, this option indicates that the user will be allowed to login to the CLI. If not specified, and the authlevel is set to automation, the user will not be allowed to login to the CLI. This property is ignored if the authlevel is not set to automation.
onlyruntasks: If specified, and the authlevel is set to automation, this option indicates that the user will only be allowed to run scheduled tasks. This property is ignored if the authlevel is not set to automation. If specified, allowguiaccess will be ignored and GUI access will not be allowed.
-authlevel authorization_level: Specifies the authorization level: admin, useradmin, operator, automation, or monitor.
session_name | -: Use this optional parameter when you are assigning operator authorization to a user and want to specify one or more sessions to which the operator has access. This parameter does not apply to monitors, user administrators, or administrators.; To specify multiple sessions, use a semicolon (;) to separate the session names.; If you specify -authlevel operator but do not specify a session name, the user is not granted operator status to any of the existing sessions but is granted permission to create new sessions.; Alternatively, use the dash (-) to specify that input for this parameter comes from an input stream (stdin). You can specify multiple session names from stdin when the dash (-) is specified. The dash is supported only in single-shot mode.

Example: Adding a new operator

The following command adds a new operator jim for three different sessions.

csmcli> mkuser -name jim -authlevel operator session1;session2;session3

The following output is returned:

Please enter the password for user jim:
Please confirm the password for user jim: 
IWNR4036I Successfully added user jim to the basic user registry.
IWNR4017I Successfully granted the session operator role to jim.

Example: Adding a new operator

The following command adds a new operator jim for three different sessions.

csmcli> mkuser -name jim -authlevel operator session1;session2;session3

The following output is returned:

Please enter a password for user jim:
Please confirm the password for user jim: 
IWNR4036I Successfully added user jim to the basic user registry.
IWNR4016I Successfully granted the session operator role to jim.