HMC tasks, user roles, IDs, and associated commands

The roles discussed in this section refer to HMC users; operating systems running on logical partitions has its own set of users and roles.

Each HMC user has an associated task role and a resource role. The task role defines the operations the user can perform. The resource role defines the systems and partitions for performing the tasks. The users may share task or resource roles. The HMC is installed with five predefined task roles. The single predefined resource role allows access to all resources. The operator can add customized task roles, customized resource roles, and customized user IDs.

Some tasks have an associated command. For more information about accessing the HMC command line, see Using the HMC remote command line.

Some tasks can only be performed using the command line. For a listing of those tasks, see Table 6.

For more information about where to find task information, see the following table:

Table 1. HMC task groupings
HMC tasks and the corresponding user roles, IDs, and commands	Associated table
HMC Management	Table 2
Service Management	Table 3
Systems Management	Table 4
Control Panel Functions	Table 5

This table describes the HMC management tasks, commands, and default user roles associated with each HMC Management task.

Table 2. HMC Management tasks, commands, and default user roles
HMC Interface Tasks and Associated Commands	User roles and IDs
HMC Interface Tasks and Associated Commands	Operator (hmcoperator)	Super Administrator (hmcsuperadmin)	Viewer (hmcviewer)	Service Representative (hmcservicerep)
Backup Management Console Data bkconsdata	X	X		X
Backup Profile Data bkprofdata	X	X		X
Change BMC Certificates chbmccert	X	X		X
Certificate Management chhmccert lshmccert mkhmccert		X
Change Date and Time chhmc lshmc	X	X		X
Change Language and Locale chhmc lshmc	X	X	X	X
Change HMC Configuration chipsec chpsm chusrtca	X	X		X
Change Network Settings chhmc lshmc	X	X		X
Change Proxy Configuration chproxy		X		X
Change User Password chhmcusr	X	X	X	X
List BMC Certificates lsbmccert	X	X	X	X
List HMC Configuration lsipsec lspsm lsusrtca	X	X	X	X
List HMC Encryption Task lshmcencr	X	X	X
List System Plan lssysplan		X
List Proxy Configuration lsproxy	X	X	X	X
Manage KDC chhmc lshmc getfile rmfile		X
Manage LDAP lshmcldap chhmcldap		X
Launch Guided Setup Wizard		X
Launch Remote Hardware Management Console	X	X	X	X
Lock HMC Screen	X	X	X	X
Logoff or Disconnect	X	X	X	X
Manage Certificates		X
Manage Data Replication	X	X
Manage Task and Resource Roles chaccfg lsaccfg mkaccfg rmaccfg		X
Manage User Profiles and Access chhmcusr lshmcusr mkhmcusr rmhmcusr		X
Manage Users and Tasks lslogon termtask	X	X	X	X
Open 5250 Console	X	X		X
Enable Remote Command Execution chhmc lshmc	X	X		X
Enable Remote Operation chhmc lshmc	X	X	X	X
Enable Remote Virtual Terminal	X	X		X
Restore Management Console Data	X	X		X
Save Upgrade Data saveupgdata	X	X		X
Schedule Operations	X	X
Shut Down or Restart hmcshutdown	X	X		X
Serviceable Events Manager lssvcevents	X	X		X
View Licenses	X	X	X	X

This table describes the Service Management tasks, commands, and default user roles.

Table 3. Service Management tasks, commands, and default user roles
HMC Interface Tasks and Associated Commands	User roles and IDs
HMC Interface Tasks and Associated Commands	Operator (hmcoperator)	Super Administrator (hmcsuperadmin)	Viewer (hmcviewer)	Service Representative (hmcservicerep)
Create Serviceable Event		X		X
Serviceable Events Manager chsvcevent cpfile lssvcevents mksvcevent updpmh		X		X
Format Media formatmedia	X	X		X
Manage Dumps dump cpdump getdump lsdump startdump lsfru	X	X		X
Transmit Service Information chsacfg lssacfg	X	X
Enable Electronic Service Agent	X	X		X
Manage Outbound Connectivity	X	X		X
Manage Inbound Connectivity	X	X		X
Manage Customer Information	X	X		X
Authorize User		X
Manage Event Notification chsacfg lssacfg	X	X		X
Manage Connection Monitoring	X	X	X	X
Electronic Service Agent Setup Wizard		X		X

This table describes the Systems Management tasks, commands, and default user roles.

Table 4. Systems Management tasks, commands, and default user roles
HMC Interface Tasks and Associated Commands	User roles/IDs
HMC Interface Tasks and Associated Commands	Operator (hmcoperator)	Super Administrator (hmcsuperadmin)	Viewer (hmcviewer)	Service Representative (hmcservicerep)
General Settings lshwres	X	X	X	X
lsled	X	X	X	X
lslparmigr	X	X	X	X
lssyscfg	X	X	X	X
chhwres	X	X	X	X
chsyscfg	X	X	X	X
migrlpar	X	X	X	X
optmem	X	X		X
lsmemopt	X	X	X	X
lsrrstartlpar	X	X
Update Password chsyspwd		X
Change Default User Interface Settings	X	X	X	X
List CEC Property lscomgmt lsiotopo	X	X	X	X
List Utilization Data lslparutil	X	X	X	X
Operations
Power Off chsysstate	X	X		X
Activate chsysstate	X	X		X
Save Current Configuration chsysstate	X	X		X
Restart chsysstate	X	X		X
Shut Down chsysstate	X	X		X
chlparstate	X	X		X
LED Status: Deactivate Attention LED Attention LED chled	X	X
LED Status: Identify LED Attention LED	X	X	X	X
LED Status: Test LED Attention LED	X	X	X	X
Schedule Operations	X	X
Launch ASM Interface asmmenu	X	X		X
Rebuild chsysstate	X	X
Power Management chpwrmgmt lspwrmgmt		X
Delete rmsyscfg	X	X		X
Mobility lslparmigr migrlpar	X	X		X
Manage Profiles chsyscfg lssyscfg mksyscfg rmsyscfg chsysstate	X	X		X
Manage System Plan cpsysplan rmsysplan		X
Make System Plan mksysplan		X
Deploy System Plan deploysysplan		X
Change N_Port Login chnportlogin	X	X		X
RR Start LPAR lsrrstartlpar rrstartlpar	X	X
Migrate LPAR migrdbg refdev	X	X
Make Profile Data mkprofdata	X	X
Restore Profile Data migrcfg	X	X
Remove Profile Data rmprofdata	X	X
Manage Pmem CEC Config: Initialize Profile Data: Restore Profile Data rstprofdata For option "--retainpmemvolume" (access only for hmcsuperadmin)	X	X
Vios Admin Op: Virtual IO Server Command viosvrcmd For option "--admin" (access only for hmcsuperadmin and hmcoperator)	X	X		X
Operations	X	X	X	X
Configuration
Create Partition from Template		X
Deploy System from Template		X
Capture Configuration as Template		X
Change CEC Property chprimhmc	X	X
Change Trusted System Key chtskey		X
Create Partition		X
List LPAR Property lsmigrdbg	X	X	X	X
Hibernate LPAR lsrsdevsize	X	X
List N_Port Login lsnportlogin	X	X		X
LS Profile Space lsprofspace	X	X	X	X
List Trusted System Key lstskey	X	X	X	X
Manage Custom Groups	X	X		X
Manage Profiles chsyscfg chsysstate lssyscfg mksyscfg rmsyscfg	X	X	X	X
Manage License Keys chlickey	X	X
Manage Utilization Data chlparutil	X	X		X
Save Current Configuration Save Current Configuration mksyscfg	X	X
ViewSPP lsmemdev	X	X	X	X
Connections
Service Processor Status lssysconn	X	X	X	X
Reset or Remove Connections rmsysconn	X	X
Add Connection mksysconn	X	X
Open V Term mkvterm	X	X		X
Close V Term rmvterm	X	X		X
Disconnect Another HMC		X
Hardware (Information)
Hardware Operations	X	X	X	X
Updates
Check Readiness updlic		X		X
System Firmware lslic		X		X
Update HMC updhmc lshmc		X		X
Serviceability
Serviceable Events Manager chsvcevent lssvcevents		X		X
Change SNMP Alerts chspsnmp	X	X		X
Create Serviceable Event		X		X
Reference Code Log lsrefcode	X	X	X	X
Control Panel Functions lssyscfg	X	X
Add FRU		X		X
Add Enclosure		X		X
Exchange FRU		X		X
Remove FRU		X		X
Remove Enclosure		X		X
Power On/Off Unit		X		X
Manage Dumps dump cpdump getdump lsdump startdump lsfru	X	X		X
Collect VPD	X	X	X	X
Type, Model, Feature		X
Setup FSP Failover chsyscfg lssyscfg		X
Initiate FSP Failover chsysstate		X
List CEC Property lsprimhmc	X	X	X	X
Capacity on Demand (CoD)
Enter CoD code chcod		X
View History Log lscod	X	X	X	X
Change CEC Property chcomgmt	X	X
CoD Pool Management: Change CoD chcodpool	X	X
Change CoD mkcodpool		X
Change VET Code chvet		X
List CoD Information lscodpool	X	X	X	X
List VET Information lsvet	X	X	X	X
Processor: View Capacity Settings lscod	X	X	X	X
Processor CUoD: View Code Information lscod	X	X	X	X
Processor: On/Off CoD: Manage chcod		X
Processor: On/Off CoD: View Capacity Settings lscod	X	X	X	X
Processor: On/Off CoD: View Billing Information lscod	X	X	X	X
Processor: On/Off CoD: View Code Information lscod	X	X	X	X
Processor: Trial CoD: Stop chcod		X
Processor: Trial CoD: View Capacity Settings lscod	X	X	X	X
Processor: Trial CoD: View Code Information lscod	X	X	X	X
Processor: Reserve CoD: Manage chcod		X
Processor: Reserve CoD: View Capacity Settings lscod	X	X	X	X
Processor: Reserve CoD: View Code Information lscod	X	X	X	X
Processor: Reserve CoD: View Shared Processor Utilization lscod	X		X	X
PowerVM® (formerly known as Advanced POWER® Virtualization): Enter Activation Code chcod		X
PowerVM: View History Log lscod	X	X	X	X
PowerVM: View Code Information lscod	X	X	X	X
Enterprise Enablement: Enter Activation Code chcod		X
Enterprise Enablement: View History Log lscod	X	X	X	X
Enterprise Enablement: View Code Information lscod	X	X	X	X
Other Advanced Functions: Enter Activation Code chcod		X
Other Advanced Functions: View History Log lscod	X	X	X	X
Other Advanced Functions: View Code Information lscod	X	X	X	X
Processor: Manage chcod		X
Processor: View Capacity Settings lscod	X	X	X	X
Processor: View Code Information lscod	X	X	X	X
Memory: Manage chcod		X
Memory: View Capacity Settings lscod	X	X	X	X
Memory: View Code Information lscod	X	X	X	X

This table describes the Control Panel Functions tasks, commands, and default user roles.

Table 5. Control Panel Functions tasks, commands, and user roles
HMC Interface Tasks and Associated Commands	User roles/IDs
HMC Interface Tasks and Associated Commands	Operator (hmcoperator)	Super Administrator (hmcsuperadmin)	Viewer (hmcviewer)	Service Representative (hmcservicerep)
Serviceability
(21) Activate Dedicated Service Tools chsysstate	X	X
(65) Disable Remote Service chsysstate	X	X
(66) Enable Remote Service chsysstate	X	X
(67) DIsk Unit IOP Reset / Reload chsysstate	X	X
(68) Concurrent Maintenance Power Off Domain	X	X
(69) Concurrent Maintenance Power On Domain	X	X
(70) IOP Control Storage Dump chsysstate	X	X
(71) Product Engineering Debug Tools pedbg
(72) PE Shell Access pesh	X	X	X	X

This table describes the commands that are not associated with an HMC UI task, and defines the default user roles that can perform each command.

Table 6. Command line tasks, associated commands, and user roles
Command line tasks	User roles/IDs
Command line tasks	Operator (hmcoperator)	Super Administrator (hmcsuperadmin)	Viewer (hmcviewer)	Service Representative (hmcservicerep)
Change which encryption is used by the HMC to encrypt the passwords of locally authenticated HMC users, or change which encryptions can be used by the HMC Web UI. chhmcencr		X
List which encryption is used by the HMC to encrypt the passwords of locally authenticated HMC users, or list which encryptions can be used by the HMC Web UI chhmcfs	X	X	X
Free up space in HMC file systems chhmcfs	X	X
List HMC file system information lshmcfs	X	X	X	X
Test for removable media readiness on the HMC ckmedia	X	X		X
Obtain required files for an HMC upgrade from a remote site getupgfiles	X	X		X
Provide screen capture on the HMC hmcwin	X	X	X	X
Log SSH command usage logssh	X	X	X	X
Clear or dump partition configuration data on a managed system lpcfgop		X
List environmental information for a managed frame, or for systems contained in a managed frame lshwinfo	X	X	X	X
List which HMC owns the lock on a managed frame lslock	X	X	X	X
Force an HMC lock on a managed frame to be released rmlock		X
List the storage media devices that are available for use on the HMC lsmediadev	X	X	X	X
Manage SSH authentication keys mkauthkeys	X	X	X	X
Monitoring HMC subsystems and system resources monhmc	X	X	X	X
Remove the utilization data collected for a managed system from the HMC rmlparutil	X	X		X
Enable users to edit a text file on the HMC in a restricted mode rnvi	X	X	X	X
Restore hardware resources after a DLPAR failure rsthwres		X
Restore upgrade data on the HMC rstupgdata	X	X		X
Transfer a file from the HMC to a remote system sendfile	X	X	X	X
chsvc	X	X		X
lssvc	X	X	X	X
chstat	X	X		X
lsstat	X	X	X	X
chpwdpolicy		X
lspwdpolicy	X	X	X	X
mkpwdpolicy		X
rmpwdpolicy		X
expdata		X