mkauth

Use the mkauth command to grant monitor, administrator, user administrator, automation, or operator authorization to a user. (This command will not remove authorization for an existing user.)

Syntax

Read syntax diagramSkip visual syntax diagrammkauth-help-h-?-quiet-authleveladminuseradminoperatorautomationmonitor-allsessions-allowguiaccess-allowcliaccess-onlyruntasks
Read syntax diagramSkip visual syntax diagram-namename-typegroupuser; session_name - -emailemail_address[,email_address]

Parameters

-help | -h | -?
Lists help for the command. If you specify additional parameters and arguments, those parameters and arguments are ignored.
-name name
Specifies a user ID or group name to which you grant authorization.
-type group | user
Specifies whether the name is of a group or user.
-allsessions
When authlevel is set to operator, this option indicates that the user will be authorized to manage all existing and future sessions. When set all session names specified will be ignored. The option will be ignored for all other authlevel values.
-authlevel authorization_level
Specifies the authorization level: admin, useradmin, operator, automation, or monitor.
-allowguiaccess
If specified, and the authlevel is set to automation, this option indicates that the user will be allowed to login to the GUI. If not specified, and the authlevel is set to automation, the user will not be allowed to login to the GUI. This property is ignored if the authlevel is not set to automation.
-allowcliaccess
If specified, and the authlevel is set to automation, this option indicates that the user will be allowed to login to the CLI. If not specified, and the authlevel is set to automation, the user will not be allowed to login to the CLI. This property is ignored if the authlevel is not set to automation.
-onlyruntasks
If specified, and the authlevel is set to automation, this option indicates that the user will only be allowed to run scheduled tasks. This property is ignored if the authlevel is not set to automation. If specified, -allowguiaccess will be ignored and GUI access will not be allowed.
session_name | -
Use this optional parameter when you are assigning operator authorization to a user and want to specify one or more sessions to which the operator has access. This parameter does not apply to monitors, user administrators, administrators, or users with automation authority.

To specify multiple sessions, use a semicolon (;) to separate the session names.

If you specify -authlevel operator but do not specify a session name, the user is not granted operator status to any of the existing sessions but is granted permission to create new sessions.

Alternatively, use the dash (-) to specify that input for this parameter comes from an input stream (stdin). You can specify multiple session names from stdin when the dash (-) is specified. The dash is supported only in single-shot mode.

-email email_address[,email_address]
Specifies the email addresses to be associated with the given user. Multiple email addresses can be added by using a comma-separated list.

Example: Adding a group with monitor privileges

The following command grants monitor authorization to the user named csmgroup.

csmcli> mkauth -name csmgroup -type group -authlevel monitor

The following output is returned:

IWNR4018I  Successfully granted the monitor role to csmgroup.

Example: Adding a user with operator privileges

The following command grants operator authorization to the user named csmuser.

csmcli> mkauth -name csmuser -type user -authlevel operator session1

The following output is returned:

IWNR4016I  Successfully granted the session operator role to csmuser.

Example: Adding the Superuser group

The following command adds the Superuser group to the Administrator role.

csmcli> mkauth -name Superuser -type group -authlevel admin

The following output is returned:

IWNR4017I  Successfully granted the administrator role to Superuser.