HP 3PAR Command Line Interface Administrator's Manual: HP 3PAR OS 3.1.2 (QR482-96525, September 2013)

NOTE:
• The first HP 3PAR storage system user account created must have a role with the right to create
additional users. If the first user created has limited rights, the ability to configure the system
will be restricted.
• The <object_set>_set rights include the right to remove the object. For example, the
vvset_set right includes the right to remove virtual volume sets.
• If you are using HP 3PAR Virtual Domains for access control, you must assign users a domain
you created in your system or the all domain. See “Managing HP 3PAR Virtual Domains”
(page 58) for instructions on creating domains. For more information about domains, see the
HP 3PAR StoreServ Concepts Guide.
• To create a new user, issue the createuser -c|-e <password> <user_name>
<domain_name> <role> command, where:
◦ -c|-e <password> is either a clear-text (-c) or encrypted (-e) password. A clear-text
password must be between 6 and 8 characters in length. An encrypted password must
be less than or equal to 31 characters in length. Encrypted passwords are generated by
the system. If no password is specified using -c or -e, then you are prompted to enter
a clear-text password.
◦ <user_name> is the name of the CLI account user. The user name can be up to 31
characters long. Valid characters include alphanumeric characters, the period symbol
(.), dash symbol (-), and underscore symbol (_). The first character must be alphanumeric
or an underscore symbol for users connecting to the system with the HP 3PAR CLI
application. To access the system with an SSH connection, the first character of the user
name must be alphanumeric.
◦ <domain_name> is the name of the domain to which the user will belong. The domain
name can be up to 31 characters long. If you are not using Virtual Domains, specify the
all domain. If you are using virtual domains, specify the name of an existing domain
in your system.
NOTE: By default, users in systems not using virtual domains are in the all domain.
Users in the all domain have rights over the entire system. The Super, Create, Basic Edit,
3PAR AO, and 3PAR RM roles cannot be restricted and always belong to the all domain.
For more information about the all domain, see the HP 3PAR StoreServ Concepts Guide.
◦ <role> is the role assigned to the user. Valid values include browse, edit, super,
service, create, basic_edit, 3PAR_AO, and 3PAR_RM. The roles and rights
assigned to the CLI user determine which tasks a user can perform with a system. For
information about viewing the roles and rights defined on a system, see “Viewing User
Roles and Rights” (page 17). To view a list of roles and all of the rights assigned to the
roles, see “Mapping Roles and Rights” (page 185).
You can verify the creation of a new user with the showuser command.
Viewing Users
If you are using Virtual Domains, users with the Super, Create, Basic Edit, 3PAR AO, and 3PAR
RM roles can view all system users across all domains. If the user belongs to a specific domain,
the user can only view other users within the same domain.
If you are not using Virtual Domains, the output of the showuser command still displays a Domain
column. By default, users in systems not using domains fall into the all domain. For additional
details about domains, see the HP 3PAR StoreServ Storage Concepts Guide.
Viewing Users 19