Reference Information › Command Line Shell Reference Guide › Using Role Based Access Control › Managing Users

Managing Users

A local user is created using the user create command. When you create a local user, it is assigned a unique ID and an entry for that user is created in the local directory service. The new user is not automatically granted any access level rights on any object. Typically, after creating a user, that user is added as a member to one or more local groups. The user then obtains the access level rights of these groups. If you are using an external directory service (such as Active Directory), you do not need to create the user.

Note: Every user is a member of the implicit local group "all". If this group is assigned grid_administrator access level rights on the grid ACL, then every user (local or global) obtains these rights.

Both local and global user names may include any UTF-8 character with the following exceptions:

• User names may not contain the forward slash character "/"
• User names may not contain ASCII control characters
• User names may not contain the space or period characters

For login access to the grid, a user requires 'monitor' privileges. Use one of the following to give 'monitor' privileges to a user:

• Associate the newly created user with the group that already has 'monitor' privileges. For example, where "Group1" has monitor privileges:

  user create User1 pwd=- group=Group1
  

• Create the user without associating it to any group, then modify the grid acl to provide monitor privileges. For example, create the user with this command:

  user create User1 pwd=-
  

  Give the user 'monitor' access with the modify_acl command:

  grid modify_acl User1=monitor