Listing and deleting users, groups and roles

useradmin user list

Lists all administrative users configured for this storage system. Each user entry includes the user name, comment information, a Data ONTAP-generated user ID number, and groups that each user belongs to. For example:

> useradmin user list

Name: root

Info: Default system administrator.

Rid: 0

Groups:

Name: administrator                   

Info: Built-in account for administering the filer

Rid: 500

Groups: Administrators

Name: fred

Info: This is a comment for fred.

Rid: 131343

Groups: Users

...

useradmin user list 
user_name

Lists the extended information for a specific administrator. The extended information includes the user name, comment information, the groups that the user belongs to, a Windows-based name if the user has one, a Data ONTAP-generated user ID number, and effective allowed capabilities. For example:

>useradmin user list fred

Name: fred

Info: This is a comment for fred

Rid: 131343

Groups: Users

Full Name:

Allowed Capabilities: login-http-admin,api-snmp-
get,api-snmp-get-next

Password min/max age in days: 0/4294967295

Status: enabled

useradmin user list -g 
grp_name

Lists information for all users assigned to a specified group. For example:

> useradmin user list -g Admistrators

Name: administrator                   

Info: Built-in account for administering the filer

Rid: 500

Groups: Administrators

Name: marshall 

Info: 

Rid: 131454

Groups: Administrators

...

useradmin domainuser list -g 
group_name

Lists the SIDs of all Windows domain administrative users assigned to a specified group.

To list the user name, comment information, and the groups that each user belongs to, follow up with cifs lookup and useradmin user list commands. For example:

>useradmin domainuser list -g administrators

List of SIDS in administrators

S-1-7-24-1214340929-620487827-8395249115-512

S-1-7-24-1838915891-154599588-1081798244-500

For more information about a user, use the 'cifs lookup' 
and 'useradmin user list' commands.

>cifs lookup S-1-7-24-1214340929-620487827-8395249115-
512

name = MBS-LAB\Domain Admins

>cifs lookup S-1-7-24-1838915891-154599588-1081798244-
500

name = ZND\Administrator

>useradmin user list Administrator

Name: Administrator                   

Info: Built-in account for administering the filer

Rid: 500

Groups: Administrators

Full Name:

Allowed Capabilities: login-*,cli-*,api-*,security-*

Note
The Rid value of 500 for the Administrator user corresponds to the last number in the Administrator user's SID.

useradmin group list

Lists all the administrative user groups configured for this storage system. Each group entry includes the group name, comment information, Data ONTAP-generated user ID number, and every role associated with that group. For example:

> useradmin group list

Name: Administrators                  

Info: Members can fully administer the filer

Rid: 544

Roles: admin

Name: Backup Operators                

Info: Members can bypass file security to backup files

Rid: 551

Roles: none

...

useradmin group list 
group_name

Lists the extended details for a specified single group. An extended entry for a single group includes the group name, comment information, roles assigned to that group, and allowed capabilities. For example:

>useradmin group list Administrators

Name: Administrators

Info: Members can fully administer the filer.

Rid: 544

Roles: admin

Allowed Capabilities: login-*,cli-*,api-*,security-*

useradmin role list 

Lists all the roles configured for this storage system. Each role entry lists the role name, comment information, and allowed capabilities. For example:

>useradmin role list

Name:    admin                           

Info:                                    

Allowed Capabilities: login-*,cli-*,api-*,security-*

Name:    audit                           

Info:                                    

Allowed Capabilities: login-http-admin,api-snmp-
get,api-snmp-get-next

Name:    none                            

Info:                                    

Allowed Capabilities: 

...

useradmin role list 
role_name

Lists the information for a single specified role name. For example:

> useradmin role list admin

Name:    admin 

Info:    Default role for administrator privileges.

Allowed Capabilities: login-*,cli-*,api-*,security-*

useradmin user delete user_name

Deletes the specified user from the storage system.

The useradmin user delete command deletes any local user except for "root" and "snmp". The "snmp" administrative user can be disabled by modifying the audit role or "User" group.

Note
You cannot delete or modify a user with greater capabilities than you have. For more information about comparing capabilities, see Changing another user's capabilities.

useradmin domainuser delete 
win_user_name -g 
group1,[group2,...]

Removes the specified user from the specified group or groups.

This command does not delete the user from the domain.

Note
If you want to completely delete a user from the storage system, use the useradmin user delete command instead.

useradmin group delete 
group_name

Deletes the specified group from the storage system.

Note
All users must be removed from a group before the group itself can be deleted.

useradmin role delete role_name

Deletes the specified role from the storage system.

Note
A role that is still assigned to a group cannot be deleted.