mkusergrp
Use the mkusergrp command to create a new user group.
Syntax
>>- mkusergrp -- -- -name -- group_name ------------------------> >-- -role --+- role_id ---+--+----------+-- ------------------->< '- role_name -' '- -remote-'
Parameters
- (Required) Specifies the unique user group name. The group name cannot start or end with a blank. The group name must consist of a string of 1 - 64 ASCII characters, with the exception of the following characters: %:",*' .
- (Required) Specifies the role (by ID or name) to be associated with all users that belong
to this user group. One of the following roles must be selected:
- Monitor
- CopyOperator
- Service
- Administrator
- SecurityAdmin
- VasaProvider
- AdministratorWithoutDelete
- (Optional) Specifies that this user group should be used to set the role of remote users. This is disabled by default.
Description
The mkusergrp command creates a new user group to organize users of the SAN Volume Controller clustered system by role. Use the lsusergrp command to view a list of user groups that have been created on the clustered system.
You must have the security administrator role (SecurityAdmin role name) to create, delete, or change a user group.
Each user group has one role that determines the role of users that belong to that
group. Use the role parameter to specify one of the following roles for the
user group:
- You can issue any information display command and, additionally, the following commands:
- finderr
- dumperrlog
- dumpinternallog
- chcurrentuser
- ping
- svcconfig backup
- You can issue the following commands:
- prestartfcconsistgrp
- startfcconsistgrp
- stopfcconsistgrp
- chfcconsistgrp
- prestartfcmap
- startfcmap
- stopfcmap
- chfcmap
- startrcconsistgrp
- stoprcconsistgrp
- switchrcconsistgrp
- chrcconsistgrp
- startrcrelationship
- stoprcrelationship
- switchrcrelationship
- chrcrelationship
- chpartnership
- You can issue the following commands:
- applysoftware
- setlocale
- addnode
- rmnode
- cherrstate
- writesernum
- detectmdisk
- includemdisk
- clearerrlog
- cleardumps
- settimezone
- stopsystem
- startstats
- stopstats
- settime
- You can issue any command other than:
- chauthservice
- mkuser
- rmuser
- chuser
- mkusergrp
- rmusergrp
- chusergrp
- setpwdreset
- The
system uses this role to implement the VMware Virtual Volumes
function. It provides a group with users that can be used by that software. You can issue any
command other than:
- chauthservice
- chldap
- chldapserver
- chsecurity
- chuser
- chusergrp
- mkldapserver
- mkuser
- mkusergrp
- rmldapserver
- rmuser
- rmusergro
- setpwdreset
- You can issue all commands.
The command returns the ID of the created user group.
An invocation example
mkusergrp -name support -role ServiceThe resulting output:
User Group, id [5], successfully createdAn invocation example
mkusergrp -role VasaProvider -name myVasaProviderThe resulting output:
User Group, id [5], successfully createdAn invocation example
mkusergrp -role AdministratorWithoutDelete -name myAdministratorWithoutDelete The resulting output:
User Group, id [5], successfully created