The mkusergrp command creates a new user group.
Syntax
>>- svctask -- -- mkusergrp -- -- -name -- group_name ----------> >-- -role -- role_name --+----------+-- ----------------------->< '- -remote-'
Parameters
- -name group_name
- (Required) Specifies the unique user group name. The group name cannot start or end with a blank. The group name must consist of a string of 1 - 64 ASCII characters, with the exception of the following characters: %:",*' .
- -role role_name
- (Required) Specifies the role to be associated with all users that belong to this user group. One of the following roles must be selected: Monitor, CopyOperator, Service, Administrator, or SecurityAdmin.
- -remote
- (Optional) Specifies that this user group should be used to set the role of remote users. This is disabled by default.
Description
The mkusergrp command creates a new user group to organize users of the SAN Volume Controller cluster by role. Use the lsusergrp command to view a list of user groups that have been created on the cluster.
You must have the Security Administrator role to create, delete, or change a user group.
Each user group has one role that determines the
role of users that belong to that group. Use the role parameter
to specify one of the following roles for the user group:
- Monitor
- Users can issue the following commands: svctask finderr, dumperrlog, dumpinternallog, chcurrentuser, ping, svcconfig backup, and all of the information commands.
- Copy Operator
- Users can issue the following commands: prestartfcconsistgrp, startfcconsistgrp, stopfcconsistgrp, chfcconsistgrp, prestartfcmap, startfcmap, stopfcmap, chfcmap, startrcconsistgrp, stoprcconsistgrp, switchrcconsistgrp, chrcconsistgrp, startrcrelationship, stoprcrelationship, switchrcrelationship, chrcrelationship, and chpartnership. In addition, users can issue all of the commands allowed by the Monitor role.
- Service
- Users can issue the following commands: applysoftware, setlocale, addnode, rmnode, cherrstate, writesernum, detectmdisk, includemdisk, clearerrlog, cleardumps, settimezone, stopcluster, startstats, stopstats, and settime. In addition, users can issue all of the commands allowed by the Monitor role.
- Administrator
- Users can issue all commands except: chauthservice, mkuser, rmuser, chuser, mkusergrp, rmusergrp, chusergrp, and setpwdreset
- Security Administrator
- Users can issue all commands.
The command returns the ID of the created user group.
An invocation example
svctask mkusergrp -name support -role Service
The resulting output
User Group, id [5], successfully created