Access control commands

This section describes the command-line interface (CLI) for user access control.

Adding an access control definition
Use the access_define command to define an association between a user group and a host.
Deleting an access control definition
Use the access_delete command to delete an access control definition.
Listing access control definitions
Use the access_list command to list access control definitions.
Adding an LDAP server definition
Use the ldap_add_server command to add an LDAP server definition.
Testing an LDAP configuration
Use the ldap_test command to authenticate the specified user against an LDAP server, based on the existing configuration.
Listing LDAP configuration parameters
Use the ldap_config_get command to display system parameters that control user authentication against a specified LDAP server.
Configuring LDAP in the system
Use the ldap_config_set command to configure general system parameters that control user authentication against LDAP servers.
Listing LDAP servers defined in the system
Use the ldap_list_servers command to list LDAP servers defined in the system.
Listing LDAP server users
Use the ldap_user_list command to list LDAP server users.
Listing LDAP-based authentication mode
Use the ldap_mode_get command to list LDAP-based authentication mode.
Enabling or disabling LDAP-based authentication mode
Use the ldap_mode_set command to enable or disable LDAP-based authentication mode.
Updating an LDAP server definition
Use the ldap_update_server command to update an existing server configuration.
Removing an LDAP server definition
Use the ldap_remove_server command to remove an LDAP server definition.
Launching the ldapsearch utility
Use the ldap_search command to launch the ldapsearch utility.
Defining a new user
Use the user_define command to define a new user.
Deleting a user
Use the user_delete command to delete a user.
Adding users to user groups
Use the user_group_add_user command to add a user to a user group.
Creating user groups
Use the user_group_create command to create a user group.
Deleting a user group
Use the user_group_delete command to delete a user group.
Listing user groups
Use the user_group_list command to list all user groups or a specific one.
Removing a user from a user group
Use the user_group_remove_user command to remove a user from a user group.
Renaming user groups
Use the user_group_rename command to rename a user group.
Updating a user group
Use the user_group_update command to update a user group.
Listing users
Use the user_list command to list all users or a specific user.
Renaming users
Use the user_rename command to rename a user.
Updating a user definition
Use the user_update command to update a user definition.
Creating a new domain
Use the domain_create command to create a domain.
Updating a domain definition
Use the domain_update command to update a domain definition.
Renaming a domain
Use the domain_rename command to rename a domain.
Deleting a domain
Use the domain_delete command to delete a domain.
Listing domains
Use the domain_list command to list all domains or the specified one.
Listing users per domain
Use the domain_list_users command to list users associated with domain(s).
Listing objects in domains
Use the domain_list_objects command to list objects attached to domain(s).
Listing the global domain
Use the domain_global_list to list the global domain.
Attaching an object to a domain
Use the domain_attach_object command to associate an object with a domain.
Disassociating object from a domain
Use the domain_detach_object command to disassociate object from a domain.
Associating users to a domain
Use the domain_add_user command to associate a user to a domain.
Removing a user from a domain
Use the domain_remove_user command to remove a user from a domain.
Adding a pool to a domain
Use the domain_add_pool command to add a pool to a domain.
Removing a pool from a domain
Use the domain_remove_pool command to remove a pool from a domain.
Moving a pool from one domain to another
Use the domain_move_pool command to move a pool from one domain to another.
Moving a grouped pool from one domain to another
Use the domain_move_gp to move a pool from one domain to another.
Setting the domain attribute
Use the domain_manage command to set or clear the Managed attribute of a domain.
Setting domain-related policies
Use the domain_policy_set command to set domain-related policies.
Displaying domain-related policies
Use the domain_policy_get command to display domain-related policies.
Specifying a user associated with IBM Hyper-Scale Manager
Use the designate_msm_user_set command to specify the name of the user that is associated with the IBM Hyper-Scale Manager.
Retrieving the user associated with the IBM Hyper-Scale Manager
Use the designate_msm_user_get command to retrieve the name of the user associated with the IBM Hyper-Scale Manager.
Setting the application administrator's scope of commands
Use the appadmin_capabilities_set command to define whether an Application Administrator is authorized to perform the basic or advanced set of commands.
Getting the application administrator's scope of commands
Use the appadmin_capabilities_get command to display the state of the Application Administrator's capabilities.

Parent topic: Command-line reference