permgroups command

This command displays and configures user permission groups of the primary CMM.

Important

Users and permission groups for the Lenovo Flex System chassis are controlled by the CMM in each Lenovo Flex System chassis, using the CMM CLI users command and the permgroups command or the CMM web interface. If your Lenovo Flex System configuration includes an optional management device, such as the Lenovo XClarity Administrator or Flex System Manager hardware, users and permission groups for each optional management device installation are controlled by the optional management device software (see Lenovo XClarity Administrator information page for information about Lenovo XClarity Administrator or see documentation for information about the Flex System Manager).

Note

Permission groups are assigned to users using the users command.
Permission groups can be backed up as part of the CMM configuration using the write command.
Permission groups are restored as part of a backed up CMM configuration using the read command.

If command syntax is not correctly entered, or if a command fails to run, an error message is returned. See Common errors for a list of error messages that apply to all commands or permgroups command errors for a list of error messages that are specific to the permgroups command.

Table 1. permgroups command.
The command table is a multi-row, four-column table where each row describes a CMM CLI command option: column one lists command function, column two provides a detailed command description, column three shows command-option syntax, and column four lists valid command targets.
Function	What it does	Command	Target (see paths in Command targets)
Display all user permission groups	Displays all user permission groups set up for the CMM.	`permgroups`	Primary CMM: mm[p] mm[P] mm[x] where x is the primary CMM bay number.
Display specific user permission group	Displays information for the specified user permission group.	`permgroups -n` group_name where group_name is the name that identifies the user permission group.	Primary CMM: mm[p] mm[P] mm[x] where x is the primary CMM bay number.
Add user permission group	Creates a new user permission group. Note User permission group names can not be changed after they are added. Group names are not case sensitive.	`permgroups -add -n` group_name `-a` group_authority where: group_name is an alphanumeric string up to 63 characters in length that can include periods ( . ) and underscores ( _ ). Each group name must be unique. Group names are not case sensitive. group_authority uses the following syntax: `operator` (Operator) rbs:roles:scope where the roles are one or more of the following authority levels, separated by a vertical bar ( \| ): `super` (Supervisor) `cam` (Chassis User Account Management) `clm` (Chassis Log Management) `co` (Chassis Operator) `cc` (Chassis Configuration) `ca` (Chassis Administration) `bo` (Blade Operator) `brp` (Blade Remote Present) `bc` (Blade Configuration) `ba` (Blade Administration) `so` (I/O Module Operator) `sc` (I/O Module Configuration) `sa` (I/O Module Administration) (continued on next page)	Primary CMM: mm[p] mm[P] mm[x] where x is the primary CMM bay number.
Add user permission group (continued)		where the scope is one or more of the following devices, separated by a vertical bar ( \| ). Ranges of devices are separated by a dash ( - ). `c` n (Chassis n, where n is 1) `b` n (Blade n, where n is a valid node bay number in the chassis) `s` n (I/O module n, where n is a valid I/O-bay number in the chassis) This command can only be run by users who have one or more of the following command authorities: Supervisor Chassis account management See Commands and user authority for additional information.
Modify user permission group	Modify the selected user permission group. Note User permission group names can not be changed after they are added. Group names are not case sensitive.	`permgroups -n` group_name `-a` group_authority where: group_name is the name that identifies the user permission group. group_authority uses the following syntax: `operator` (Operator) rbs:roles:scope where the roles are one or more of the following authority levels, separated by a vertical bar ( \| ): `super` (Supervisor) `cam` (Chassis User Account Management) `clm` (Chassis Log Management) `co` (Chassis Operator) `cc` (Chassis Configuration) `ca` (Chassis Administration) `bo` (Blade Operator) `brp` (Blade Remote Present) `bc` (Blade Configuration) `ba` (Blade Administration) `so` (I/O Module Operator) `sc` (I/O Module Configuration) `sa` (I/O Module Administration) (continued on next page)	Primary CMM: mm[p] mm[P] mm[x] where x is the primary CMM bay number.
Modify user permission group (continued)		where the scope is one or more of the following devices, separated by a vertical bar ( \| ). Ranges of devices are separated by a dash ( - ). `c` n (Chassis n, where n is 1) `b` n (Blade n, where n is a valid node bay number in the chassis) `s` n (I/O module n, where n is a valid I/O-bay number in the chassis) This command can only be run by users who have one or more of the following command authorities: Supervisor Chassis account management See Commands and user authority for additional information.
Delete user permission group	Delete the specified user permission group. Note Group names are not case sensitive.	`permgroups -n` group_name`-clear` where group_name is the name that identifies the user permission group. This command can only be run by users who have one or more of the following command authorities: Supervisor Chassis account management See Commands and user authority for additional information.	Primary CMM: mm[p] mm[P] mm[x] where x is the primary CMM bay number.

Example: To add a user permission group with a name of superuser that has supervisor rights to all Lenovo Flex System components, while the Lenovo Flex System chassis is set as the persistent command environment, at the system> prompt, type

permgroups -add -n superuser -a rbs:super:c1|b1-b14|s1-s4 -T mm[p]

To display information for the superuser group, while the Lenovo Flex System chassis is set as the persistent command environment, at the system> prompt, type

permgroups -n superuser -T mm[p]

The following example shows the information that is returned from these commands:

system> permgroups -add -n superuser -a rbs:super:c1|b1-b14|s1-s4 -T mm[p]
OK
system> permgroups -n superuser -T mm[p]

-a Role:supervisor
   Blades:1|2|3|4|5|6|7|8|9|10|11|12|13|14
   Chassis:1
   Modules:1|2|3|4

system>

Give documentation feedback