IBM Tivoli Monitoring, Version 6.3

tacmd editUser

Description

Use the tacmd editUser command to edit a user definition in the Tivoli Enterprise Portal. To edit the properties of a user, the log in user must have the following permissions on the Tivoli Enterprise Portal:
  • User Administration -> Login
  • User Administration -> View
  • User Administration -> Modify
This command explicitly assigns navigators, so you must ensure that you have appended the new navigator to the list of navigators already assigned, or the other assignments will be lost. The Tivoli® Enterprise Portal client does not receive a refresh event notification when assignments are made through the CLI, so a client restart is required to pick up the changes. The default navigator view is the first navigator in the list assigned to the "NavigatorViews" property. In the following example, "MyNavigator" would be the default navigator view when the Tivoli Enterprise Portal client is restarted. 
tacmd edituser -u sysadmin -w mypassword -i sysadmin 
-p NavigatorViews=MyNavigator,Physical
Note:
  1. If you want to use the current tacmd tepsLogin values for username, password, and server hostname, do not enter any of these options for the editUser command. If you specify values for some, but not all of these options, you are prompted to specify the username and password if they are missing.
  2. If you try to modify user permissions that are inherited from a group, you will receive an error message. Inherited group permissions cannot be modified.
  3. When using this command to set two different permissions, it is best to use two separate commands; one for each permission setting.

CLI syntax

tacmd editUser
                      {-i|--id} USERID
                      {-p|--property|--properties} NAME=VALUE ...
                      [{-u|--userid} TEPS_USERID ]
                      [{-w|--password} TEPS_PASSWORD]
                      [{-s|--server} TEPS_HOSTNAME]
                      [{-n|--name} NEWNAME]
                      [{-dn|--distname} NEW_DISTINGUISHED_NAME]
                      [{-d|--desc} NEWDESCRIPTION]
                      [{-f|--force}]

where:
-i|--id
Specifies the user ID for which users are to be listed. The User ID must not contain any blank space characters in it, and its maximum allowed length is 10 characters and it must not begin with '*' or '_' character.
-p|--property|--properties
Specifies one or more NAME=VALUE pairs that identify what information is to be changed for the user. The valid options for NAME are:
  • Permissions
  • Applications
  • NavigatorViews
  • MemberOf
The values for -p option must be provided within double quotation marks. For example: 
-p "Permissions=Action.View=T" "Applications=Windows OS"
Commas are used as delimiters to specify more than one value for a property. For example: 
-p "Permissions=Action.View=T,Policy.View=T" 
"Applications=Windows OS, Linux OS"

You can use the viewUser command to identify the possible input values for Permissions, Applications, NavigatorViews, and MemberOf.

If you want to change a permission under a different realm (namespace) from the default realm (KFW), you must prefix the realm in the permission property, for example: 
 -p Permissions=KCF.Configure.View=f

If no realm is specified, the default one is used (KFW). The viewuser command helps to identify the possible realms for Permissions.

-u|--userid
Specifies the existing user ID to log in to Tivoli Enterprise Portal Server. The software prompts you for the User ID if you do not specify one.
-w|--password
Specifies the password for user authentication. The software prompts you for the password if you do not specify one.
-s|--server
Specifies the Tivoli Enterprise Portal Server hostname from where the user details to be edited. If not specified, the user details are edited from the local Tivoli Enterprise Portal Server.
n|--name
Specifies the name of the user.
-d|--desc
Specifies description of the user.
-dn|--distname
Specifies the distinguished name of the user.
f|--force
Edits the specified user without prompting for confirmation from the user.

CLI example

This example edits permission, name, and description information for the user TESTUSER. 
 tacmd editUser –i TESTUSER –u sysadmin –w “tivoli123” –s HDCHASDSTC0219
 –p “Permissions=Action.view=T, Action.modify=F” –n testuser –d testuser –f

Return values

See Table 1.

Related commands

Return to Table 1.


Feedback