mkusergrp

Use the mkusergrp command to create a new user group.

Syntax

Parameters

-name group_name

(Required) Specifies the unique user group name. The group name cannot start or end with a blank. The group name must consist of a string of 1 - 64 ASCII characters, except for the following characters: %:",*'.

-role role_id | name

(Required) Specifies the role (by ID or name) to be associated with all users that belong to this user group. One of the following roles must be selected:

Monitor
CopyOperator
Service
Administrator
SecurityAdmin
VasaProvider
RestrictedAdmin
3SiteAdmin

-remote yes | no

(Optional) Specifies if this user group should be used to set the role of remote users. The default value is no.

-multifactor yes | no

(Optional) Specifies whether the multifactor authentication access must be disabled for this user group. Value can be yes or no.

Note: The -multifactor parameter can only set to yes when a multi-factor authentication service has been enabled first. All users in the user group will use this setting, except for the superuser.

-passwordkeyrequired yes | no

(Optional) Specifies if this user group should have password and SSH key required or not. Value can be yes or no.

-disablegui yes | no

(Optional) Specifies whether the GUI access must be disabled for this user group. Value can be yes or no.

-disablecli yes | no

(Optional) Specifies whether the CLI access must be disabled for this user group. Value can be yes or no.

-disablerest yes | no

(Optional) Specifies whether the REST-API access must be disabled for this user group. Value can be yes or no.

Description

The mkusergrp command creates a new user group to organize users of the FlashSystem 7300 clustered system by role. Use the lsusergrp command to view a list of user groups that have been created on the clustered system.

You must have the security administrator role (SecurityAdmin role name) to create, delete, or change a user group. For more information, refer to User role.

The command returns the ID of the created user group.

An invocation example

mkusergrp -name MFA_Disabled_Group -role 0 -multifactor no -passwordkeyrequired yes
Modifying the authentication setting for this user group will affect logins for all users in the group. 
Are you sure you want to continue? (y/yes to confirm)  yes

The resulting output:

User Group, id [6], successfully created

An invocation example

mkusergrp -name MFA_Enabled_Group -role 0 -multifactor yes
Modifying the authentication setting for this user group will affect logins for all users in the group. 
Are you sure you want to continue? (y/yes to confirm)  yes

The resulting output:

User Group, id [7], successfully created

An invocation example

mkusergrp -name guiDisabled -role 3  -disablegui yes
Modifying the authentication setting for this user group will affect logins for all users in the group. 
Are you sure you want to continue? (y/yes to confirm)  yes

The resulting output:

User Group, id [8], successfully created

An invocation example

mkusergrp -name support -role Service

The resulting output:

User Group, id [5], successfully created

An invocation example

mkusergrp -role VasaProvider -name myVasaProvider

The resulting output:

User Group, id [5], successfully created

An invocation example

mkusergrp -role RestrictedAdmin -name myRestrictedAdmin

The resulting output:

User Group, id [5], successfully created