user list

View the list of Cryptographic Security Platform Vault users defined in the system. SEC_ADMIN sees all users. Others see users in the user groups to which they belong.

user new username

Creates a new user account with the specified username. You can also specify the following properties:

• --email=<email>
• --password=<passwd>
• --full_name=<full_name>
• --authentication=<authentication>— The default authentication method. This can be local or ldap. This option affects only newly-created user accounts. It does not change the authentication method for existing accounts.
• --account_state=<active|disabled>

• --roles=<privlist>— The allowed roles are:  CLOUD_ADMIN, DOMAIN_ADMIN, SEC_ADMIN, or any combination of the three. Separate multiple role names with commas. For example: --roles=SEC_ADMIN,DOMAIN_ADMIN,CLOUD_ADMIN.

  If you are changing the roles for a user, you must specify all roles you want the user to have. For example, if the user currently has CLOUD_ADMIN privileges and you specify --roles=SEC_ADMIN, the user will now have only SEC_ADMIN privileges and will be removed from any Cloud Administration groups they may have been associated with. To add the SEC_ADMIN role, you would specify --roles=CLOUD_ADMIN,SEC_ADMIN.

• --groups=<grouplist> — The groups to which this user should belong. Each group name must be surrounded by " (double quotes). Separate multiple group names with commas. For example: --groups="Cloud Admin Group","Domain Admin Group".
• --password_expiration=<date>— The date on which the selected user's password expires. The next time that user logs in, they will be prompted to set a new password.
• --account_expiration=<date> — The date on which the user account will be automatically disabled. You can re-enable the account at any time after it has expired using --account_state=active.

user set username

Set information for the specified user. SEC_ADMIN can set all information for all accounts. Other users can only set the email address, full name, and password for their own account. You can specify any or all of the properties that can be specified for a new user account.

user detail username

View the details for the specified user. SEC_ADMIN can view the details for any user. Others can only view the details for their own user account.

user rm username

Removes the specified user.

user defaults

Set the default parameters for Cryptographic Security Platform Vault user accounts. You can specify:

• authentication — The default authentication method. This can be local or ldap. This option affects only newly-created user accounts. It does not change the authentication method for existing accounts.
• password_expiry — The number of days before the user's password expires. This option affects only newly-created accounts. It does not change the password expiration date for existing accounts.
• max_failed_logins — The number of failed login attempts that can be made before Cryptographic Security Platform Vault disables the user account. This setting affects all user accounts, including existing accounts.
• min_passwd_length — The minimum number of characters required in a Cryptographic Security Platform Vault account password. This setting affects all user accounts, including existing accounts.