mkauth
Use the mkauth command to grant monitor, administrator, user administrator, automation, or operator authorization to a user. (This command will not remove authorization for an existing user.)
Syntax
Parameters
- -help | -h | -?
- Lists help for the command. If you specify additional parameters and arguments, those parameters and arguments are ignored.
- -name name
- Specifies a user ID or group name to which you grant authorization.
- -type group | user
- Specifies whether the name is of a group or user.
- -allsessions
- When
authlevelis set to operator, this option indicates that the user will be authorized to manage all existing and future sessions. When set all session names specified will be ignored. The option will be ignored for all otherauthlevelvalues. - -authlevel authorization_level
- Specifies the authorization level: admin, useradmin, operator, automation, or monitor.
- -allowguiaccess
- If specified, and the
authlevelis set to automation, this option indicates that the user will be allowed to login to the GUI. If not specified, and theauthlevelis set to automation, the user will not be allowed to login to the GUI. This property is ignored if theauthlevelis not set to automation. - -allowcliaccess
- If specified, and the
authlevelis set to automation, this option indicates that the user will be allowed to login to the CLI. If not specified, and theauthlevelis set to automation, the user will not be allowed to login to the CLI. This property is ignored if theauthlevelis not set to automation. - -onlyruntasks
- If specified, and the
authlevelis set to automation, this option indicates that the user will only be allowed to run scheduled tasks. This property is ignored if theauthlevelis not set to automation. If specified,-allowguiaccesswill be ignored and GUI access will not be allowed. - session_name | -
- Use this optional parameter when you are assigning operator authorization to a user and want to
specify one or more sessions to which the operator has access. This parameter does not apply to
monitors, user administrators, administrators, or users with automation authority.
To specify multiple sessions, use a semicolon (;) to separate the session names.
If you specify -authlevel operator but do not specify a session name, the user is not granted operator status to any of the existing sessions but is granted permission to create new sessions.
Alternatively, use the dash (-) to specify that input for this parameter comes from an input stream (stdin). You can specify multiple session names from stdin when the dash (-) is specified. The dash is supported only in single-shot mode.
- -email email_address[,email_address]
- Specifies the email addresses to be associated with the given user. Multiple email addresses can be added by using a comma-separated list.
Example: Adding a group with monitor privileges
The following command grants monitor authorization to the user named csmgroup.
csmcli> mkauth -name csmgroup -type group -authlevel monitorThe following output is returned:
IWNR4018I Successfully granted the monitor role to csmgroup.
Example: Adding a user with operator privileges
The following command grants operator authorization to the user named csmuser.
csmcli> mkauth -name csmuser -type user -authlevel operator session1The following output is returned:
IWNR4016I Successfully granted the session operator role to csmuser.
Example: Adding the Superuser group
The following command adds the Superuser group to the Administrator role.
csmcli> mkauth -name Superuser -type group -authlevel adminThe following output is returned:
IWNR4017I Successfully granted the administrator role to Superuser.
