Table of ContentsView in Frames

Commands that list users, domain users, groups, or roles

You use the useradmin commands to display information for users, domain users, groups, or roles.

The following table describes the commands.

Command Description
useradmin whoami Displays the user name of the account you are currently using.
useradmin user list Lists all administrative users configured for this storage system. Each user entry includes the user name, comment information, a user ID number generated by Data ONTAP, and groups that each user belongs to.
useradmin user list  user_name Lists the extended information for a specific administrator. The extended information includes the user name, comment information, the groups that the user belongs to, a Windows-based name if the user has one, a user ID number generated by Data ONTAP, effective allowed capabilities, and user account status.
useradmin user list -x Lists the extended information for all administrators. The extended information includes the user name, comment information, the groups that the user belongs to, a Windows-based name if the user has one, a user ID number generated by Data ONTAP, effective allowed capabilities, and user account status.
useradmin user list -g  grp_name Lists information for all users assigned to a specified group.
useradmin domainuser list  -g  group_name Lists the Security IDs (SIDs) of all Windows domain administrative users assigned to a specified group.

To list the user name, comment information, and the groups that each user belongs to, follow up with cifs lookup and useradmin user list commands.

Note: The useradmin user list command output includes the Relative ID (RID), which is a unique integer associated with each user. The RID value of 500 for the Administrator user corresponds to the last number in the Administrator user’s SID.
useradmin group list Lists all the administrative user groups configured for this storage system. Each group entry includes the group name, comment information, user ID number generated by Data ONTAP, and every role associated with that group.
useradmin group list  group_name Lists the extended details for a specified single group. An extended entry for a single group includes the group name, comment information, roles assigned to that group, and allowed capabilities.
useradmin role list Lists all the roles configured for this storage system. Each role entry lists the role name, comment information, and allowed capabilities.
useradmin role list  role_name Lists the information for a single specified role name.

Example of useradmin whoami output

toaster> useradmin whoami
Administrator

Example of useradmin user list output

toaster> useradmin user list
Name: root
Info: Default system administrator.
Rid: 0
Groups:

Name: administrator                   
Info: Built-in account for administering the filer
Rid: 500
Groups: Administrators

Name: fred
Info: This is a comment for fred.
Rid: 131343
Groups: Users
...

Example of useradmin user list user_name output

toaster> useradmin user list fred
Name: fred
Info: This is a comment for fred
Rid: 131343
Groups: Users
Full Name:
Allowed Capabilities: login-http-admin,api-snmp-get,api-snmp-get-next
Password min/max age in days: 0/4294967295
Status: enabled

Example of useradmin user list -x output

toaster> useradmin user list -x
Name: administrator
Info: Built-in account for administering the filer
Rid: 500
Groups: Administrators
Full Name:
Allowed Capabilities: login-*,cli-*,api-*,security-*
Password min/max age in days: 0/4294967295
Status: enabled

Name: fred
Info: This is a comment for fred
Rid: 131343
Groups: Users
Full Name:
Allowed Capabilities: login-http-admin,api-snmp-get,api-snmp-get-next
Password min/max age in days: 0/4294967295
Status: enabled
...

Example of useradmin user list -g grp_name output

toaster> useradmin user list -g Administrators
Name: administrator                   
Info: Built-in account for administering the filer
Rid: 500
Groups: Administrators

Name: marshall 
Info: 
Rid: 131454
Groups: Administrators

...

Example of useradmin domainuser list -g group_name output

toaster> useradmin domainuser list -g administrators
List of SIDS in administrators
S-1-7-24-1214340929-620487827-8395249115-512
S-1-7-24-1838915891-154599588-1081798244-500
For more information about a user, use the 'cifs lookup' and 'useradmin user list' commands.

toaster> cifs lookup S-1-7-24-1214340929-620487827-8395249115-512
name = MBS-LAB\Domain Admins

toaster> cifs lookup S-1-7-24-1838915891-154599588-1081798244-500
name = ZND\Administrator

toaster> useradmin user list Administrator
Name: Administrator                   
Info: Built-in account for administering the filer
Rid: 500
Groups: Administrators
Full Name:
Allowed Capabilities: login-*,cli-*,api-*,security-*

Example of useradmin group list output

toaster> useradmin group list
Name: Administrators                  
Info: Members can fully administer the filer
Rid: 544
Roles: admin

Name: Backup Operators                
Info: Members can bypass file security to backup files
Rid: 551
Roles: none
...

Example of useradmin group list group_name output

toaster> useradmin group list Administrators
Name: Administrators
Info: Members can fully administer the filer.
Rid: 544
Roles: admin
Allowed Capabilities: login-*,cli-*,api-*,security-*

Example of useradmin role list output

toaster> useradmin role list
Name:    admin                           
Info:                                    
Allowed Capabilities: login-*,cli-*,api-*,security-*

Name:    audit                           
Info:                                    
Allowed Capabilities: login-http-admin,api-snmp-get,api-snmp-get-next

Name:    none                            
Info:                                    
Allowed Capabilities: 

...

Example of useradmin role list role_name output

toaster> useradmin role list admin
Name:    admin 
Info:    Default role for administrator privileges.
Allowed Capabilities: login-*,cli-*,api-*,security-*