Navisphere Command Line Interface (CLI) Reference - VMware Communities

Domain and Security CommandsNote: To issue security CLI commands for user account set-up, modification,or removal you must have administrator privileges. Global administratorscan manage both global and local user accounts. Local administrators canonly manage local user accounts. See Table 4, “Operations that users withdifferent roles can perform,” for an explanation of operations that can beperformed by role and scope.You can assign a user a role globally (the user has the role across allstorage systems in the domain) or locally (the user has the role on aspecific storage system only). Each global username must be uniquein the domain; each local username must be unique within the localmanagement server.Note: Usernames and passwords can be 1 to 32 characters, including letters(case sensitive), numbers, underscores, non-numeric, non-alpha characters,spaces, and must start with a letter.The following table defines the operations a user can perform by roleand scope.Table 4Operations that users with different roles can performUser role Can view Can add, modify, or deleteGlobal administratorLocal administratorGlobal ManagerLocal ManagerGlobal MonitorLocal MonitorAll domain andstorage-system settings, andglobal and local accountsLocal storage-system settingsand local user accountsAll storage-system settings indomainLocal management serverstorage-system informationAll storage-system settingsand accounts in domainLocal storage-system settingsand accounts in domainAll domain andstorage-system settings, andglobal and local accounts(cannot delete the last globaladministrator account)Local storage-system settingsand local user accountsAll storage-system settings indomainLocal storage-system settingsNothingNothing421