Use the mkusergrp command to create
a new user group.
Syntax
mkusergrp -namegroup_name -rolerole_name [ -remote ]
Parameters
- -name group_name
- (Required) Specifies the unique user group name. The group name
cannot start or end with a blank. The group name must consist of a
string of 1 - 64 ASCII characters, with the exception of the following
characters: %:",*' .
- -role role_name
- (Required) Specifies the role to be associated with all users
that belong to this user group. One of the following roles must be
selected:
- Monitor
- CopyOperator
- Service
- Administrator
- SecurityAdmin
- VasaProvider
.
- -remote
- (Optional) Specifies that this user group should be used to set
the role of remote users. This is disabled by default.
Description
The mkusergrp command
creates a new user group to organize users of the Lenovo Storage V7000 clustered system by role. Use the lsusergrp command
to view a list of user groups that have been created on the clustered
system.
You must have the security administrator
role (SecurityAdmin role name) to create,
delete, or change a user group.
Each user group has one role
that determines the role of users that belong to that group. Use the
role parameter
to specify one of the following roles for the user group:
- Monitor
- You can issue any information display command and, additionally,
the following commands:
- finderr
- dumperrlog
- dumpinternallog
- chcurrentuser
- ping
- svcconfig backup
- CopyOperator
- You can issue the following commands:
- prestartfcconsistgrp
- startfcconsistgrp
- stopfcconsistgrp
- chfcconsistgrp
- prestartfcmap
- startfcmap
- stopfcmap
- chfcmap
- startrcconsistgrp
- stoprcconsistgrp
- switchrcconsistgrp
- chrcconsistgrp
- startrcrelationship
- stoprcrelationship
- switchrcrelationship
- chrcrelationship
- chpartnership
In addition, you can issue all of the commands allowed by the Monitor role.
- Service
- You can issue the following commands:
- applysoftware
- setlocale
- addnode
- rmnode
- cherrstate
- writesernum
- detectmdisk
- includemdisk
- clearerrlog
- cleardumps
- settimezone
- stopsystem
- startstats
- stopstats
- settime
In addition, you can issue all of the commands allowed by the Monitor role.
- Administrator
- You can issue any command other than:
- chauthservice
- mkuser
- rmuser
- chuser
- mkusergrp
- rmusergrp
- chusergrp
- setpwdreset
- VASAProvider
- Spectrum Control™ software uses
this role to implement the VMware Virtual Volumes function. (It provides a group with users that can
be used by that software.) You can issue any command other than:
- chauthservice
- chldap
- chldapserver
- chsecurity
- chuser
- chusergrp
- mkldapserver
- mkuser
- mkusergrp
- rmldapserver
- rmuser
- rmusergro
- setpwdreset
- SecurityAdmin
- You can issue all commands.
The command returns the ID
of the created user group.
An invocation example
mkusergrp -name support -role Service
The
resulting output:
User Group, id [5], successfully created
An
invocation example
mkusergrp -role VasaProvider -name myVasaProvider
The
resulting output:
User Group, id [5], successfully created