User Group commands – INFINIDAT Support

user.group.add_pool

ROLE: Admin

Description	Grant pool provisioning privileges to an LDAP group of pool administrators.
Syntax	`user.group.add_pool group=POOLADMINGROUP pool=POOL`
Arguments	`pool`	Name of an existing pool
	`group`	Name of an existing ldap group with PoolAdmin roleQoS policy
Example	`user.group.add_pool name=user-group-1 pool=pool1`
	`Granted provisioning privileges on pool pool1 to ldap group usergroup-1`

ROLE: Admin

Description	Change LDAP or Active Directory group role. Change the InfiniBox user role with which the members of an LDAP group access the InfiniBox.
Syntax	`user.group.change_role group=LDAPGROUP role=ROLE`
Arguments	`role`	User role
	`group`	Name of an existing ldap group
Example	`user.group.change_role name=group1 role=PoolAdmin`
	`LDAP group group1 role changed from ReadOnly to PoolAdmin`

ROLE: Admin

Description	Map an LDAP group to an InfiniBox user role. Allow members of an LDAP group to access the InfiniBox with a specified user role. The available user roles are: Admin, PoolAdmin and ReadOnly.
Syntax	`user.group.create name=NAME role=ROLE ldap=USERSREPOSITORY dn=LDAPDN`
Arguments	`dn`	LDAP distinguished name
	`ldap`	Name of an existing ldap server
	`role`	User role
	`name`	A maximum of 65 Latin characters, numbers, spaces, and the following symbols: "^&'@()[]$=!-#{}%.+~_" (excluding quotation marks). Leading and trailing whitespace characters are stripped.
Example	`user.group.create name=ldap1 role=Admin ldap=infinidat.com dn=CN=Administrators,CN=Builtin,DC=infinidat,DC=com`
	`LDAP group ldap1 created`

ROLE: Admin

Description	Unmap an LDAP group from a user role.
Syntax	`user.group.delete group=LDAPGROUP`
Arguments	`group`	Name of an existing ldap group
Example	`user.group.delete name=ldap1`
	`LDAP group ldap1 deleted`

ROLE: All Roles

Description	List LDAP groups that are mapped to user roles.
Syntax	`user.group.query [group=LDAPGROUP]`
Arguments	`group`	Name of an existing ldap group
Example	`user.group.query`
	`NAME ROLE LDAP DN POOLS admin_group Admin inf CN=Users,CN=Builtin,DC=corp,DC=mgmttest - read_only ReadOnly read CN=dev,OU=local,DC=infinidat.com -`

ROLE: Admin

Description	Revoke pool provisioning privileges from an LDAP group of pool administrators.
Syntax	`user.group.remove_pool group=POOLADMINGROUP pool=POOL`
Arguments	`pool`	Name of an existing pool
	`group`	Name of an existing ldap group with PoolAdmin role
Example	`user.group.remove_pool name=user-group-1 pool=pool1`
	`Revoked provisioning privileges on pool pool1 from ldap group usergroup-1`

ROLE: Admin

Description	Rename a user group.
Syntax	`user.group.rename group=LDAPGROUP new_name=STR`
Arguments	`new_name`	Any sequence of characters
	`group`	Name of an existing ldap group
Example	`user.group.rename name=user-group-1 new_name=user-group-2`
	`User group user-group-1 renamed to user-group-2`