Skip to main content

Creating local groups

You can create local groups that can be used for authorizing access to data associated with the SVM over an SMB connection. You can also assign privileges that define what user rights or capabilities a member of the group has.

About this task

Local group functionality is enabled by default when the SVM is created.

When you create a local group, you must specify a name for the group and you must specify the SVM with which to associate the group. You can specify a group name with or without the local domain name, and you can optionally specify a description for the local group. You cannot add a local group to another local group.

The vserver cifs users-and-groups local-group man pages contain details about optional parameters and naming requirements.

  1. Create the local group: vserver cifs users-and-groups local-group create -vserver vserver_name -group-name group_name

    The following optional parameter might be useful:

    • -description

      A description for the local group.

  2. Verify that the group was successfully created: vserver cifs users-and-groups local-group show -vserver vserver_name

Example​

The following example creates a local group SMB_SERVER01\engineering associated with SVM vs1:

cluster1::> vserver cifs users-and-groups local-group create -vserver vs1.example.com -group-name SMB_SERVER01\engineering

cluster1::> vserver cifs users-and-groups local-group show -vserver vs1.example.com
Vserver          Group Name                   Description
---------------- ---------------------------- ----------------------------
vs1.example.com  BUILTIN\Administrators       Built-in Administrators group
vs1.example.com  BUILTIN\Backup Operators     Backup Operators group
vs1.example.com  BUILTIN\Power Users          Restricted administrative privileges
vs1.example.com  BUILTIN\Users                All users
vs1.example.com  SMB_SERVER01\engineering
vs1.example.com  SMB_SERVER01\sales

After you finish

You must add members to the new group.