lsusergrp

Use the lsusergrp command to display a list of the user groups that is created on the system.

Syntax

Read syntax diagramSkip visual syntax diagram lsusergrp -nohdr-delimdelimiter-filtervalueattribute=value-filtervalue?usergrp_nameusergrp_id

Parameters

-nohdr
By default, headings are displayed for each column of data in a concise style view, and for each item of data in a detailed style view. The -nohdr parameter suppresses the display of these headings.
Note: If no data is displayed, headings are not displayed.
-delim delimiter
By default in a concise view, all columns of data are space-separated. The width of each column is set to the maximum width of each item of data. In a detailed view, each item of data has its own row, and if the headers are displayed, the data is separated from the header by a space. If you enter -delim : on the command line, the colon character (:) separates all items of data in a concise view; for example, the spacing of columns does not occur. In a detailed view, the data is separated from its header by the specified delimiter.
-filtervalue attribute=value
Specifies a list of one or more filters. Only objects with a value that matches the filter attribute value are displayed.
Note: Some filters allow the use of a wildcard when you enter the command. The following rules apply to the use of wildcards with the CLI:
  • The wildcard character is the asterisk (*), which must be used as the first or last character in the string.
  • The command can contain a maximum of one wildcard.
  • When you use a wildcard, enclose the filter entry within double quotation marks ("").
    lsusergrp -filtervalue "role=md*"
-filtervalue?
Displays the valid filter attributes for the -filtervalue attribute=value parameter:
  • role_id
  • role_name
  • remote
  • multi_factor
  • password_sshkey_required
  • gui_disabled
  • cli_disabled
  • rest_disabled
  • cim_disabled
  • owner_id
  • owner_name
usergrp_name | usergrp_id
Specifies the ID or name of the user group to view. If you do not specify an ID or name, all groups are displayed.

Description

This table provides the attribute values that can be displayed as output view data.

Table 1. lsusergrp output
Attribute Description
id Indicates the ID of the user group.
name Indicates the name of the user group.
role Indicates the role of the user group.
remote Indicates whether users in the user group are authenticated by a remote service.
owner_id Indicates the ownership group ID of the user group.
owner_name Indicates the ownership group name of the user group.
multi_factor Indicates whether the users of this user group should be prompted for second factor authentication. Value can be yes or no.
password_sshkey_required Indicates whether the users of this user group should provide both password and SSH public key during authentication. Value can be yes or no.
gui_disabled Indicates whether the user currently logged in is a member of a user group with GUI access disabled. Value can be yes or no.
cli_disabled Indicates whether the user currently logged in is a member of a user group with CLI access disabled. Value can be yes or no.
rest_disabled Indicates whether the user currently logged in is a member of a user group with REST-API access disabled. Value can be yes or no.

An invocation example

lsusergrp

The resulting output


id name            role            remote owner_id owner_name multi_factor password_sshkey_required gui_disabled cli_disabled rest_disabled
0  SecurityAdmin   SecurityAdmin   no                         no           no                       no           yes          no
1  Administrator   Administrator   no                         no           no                       no           no           no
2  CopyOperator    CopyOperator    no                         no           no                       no           no           no
3  Service         Service         no                         no           no                       no           no           no
4  Monitor         Monitor         no                         no           no                       no           no           no
5  RestrictedAdmin RestrictedAdmin no                         no           no                       no           no           no
6  cliDisabled     Administrator   no                         no           no                       no           yes          no
7  restDisabled    Administrator   no                         no           no                       no           no           yes
8  MFA_Disabled_Group SecurityAdmin   no                      no           no                       no           no           no
9  MFA_Enabled_Group  SecurityAdmin   no                      yes          no                       no           no           no

An invocation example

lsusergrp 0

The resulting output

 id 0
 name superuser
 role SecurityAdmin
 remote no
 owner_id
 owner_name
 multi_factor no
 password_sshkey_required no
 gui_disabled no
 cli_disabled yes
 rest_disabled no