Managing DSC - SP2000 Users

Use the following information to manage DSC - SP2000 user accounts.

ROOT Users

Only the ROOT user can add or delete system users. Any new system users that are created (added) are automatically assigned a read-only access to the system (UNPROFILED). For information about user profiles and privileges, see DSC User Profiles and Privileges.

It is recommended that the ROOT user adds all system users with the appropriate user profile and provides these users with initial passwords. For information about password restrictions, see DSC Password Management.

Guidelines for User Names

User names are less than or equal to 31 characters. User names can contain alphanumeric, period, and hyphen characters. 

User names cannot have

• a period or hyphen as the only character.
  
• a period or hyphen as the initial character. 
• a number as the initial character.
  
• a period or hyphen as the final character.
  
• a period following a period or hyphen.
• a hyphen following a hyphen or period.

See the following examples of valid user names that have period or hyphen characters: 

• john.doe-smith
• john-smith.doe
• j-smith.doe
• j-s-d
• j.s.d
• j.s-d

Add a User

Start

1. From the Main Menu, click Users.
   

2. Click Add User. Enter the information as required.
   

   Three options are available for User Type:

   • No Shell users are for logging in to the Configuration Management UI (CMU). Users are still able to login through SSH, but access is very limited and commands cannot be executed.
   • SFTP users have inbound SFTP access to the system. Users have restricted access to some file systems. 
   • Shell users can not only access the CMU, but are also able to login through SSH and execute commands. 

3. Click Continue. You are prompted to confirm the changes.

   Tip

   To add an SFTP user, click the checkbox next to SFTP User.

4. Click Continue.                                                                                                                                                                                                                                                                                                                                                                                                                           

Assign a User Profile and Associated Privileges

Start

1. From the Main Menu, click Users.
2. Click User Profiles.
   
3. Click UNPROFILED.
   
4. Click the user to whom you want to assign a user profile.
   
5. Using the Profile drop-down list, select the required user profile.
6. Click Continue.

Delete a User

Start

1. From the Main Menu, click Users.
2. Click Delete User.
3. Using the User Name drop-down list, select the user you want to delete.
4. Click Continue.

SSH Access for ROOT User

To enable or disable SSH access for ROOT users:

Start

1. From the Main Menu, navigate to Users > User Settings.
2. Under Security Settings, click the button to enable or disable SSH access for ROOT user. 
   

Password-less Connections Using SSH

To allow for password-less connections:

Start

1.  From the Main Menu, Navigate to Users > User.
2. Go to the appropriate Username row and select the + beside Authorized Key(s)
   
3. Create the user key.
   
4. Click Modify.

Non-ROOT Users 

Any system user added by the ROOT user is defined as a non-root user. Non-ROOT users that are assigned a user profile are granted certain privileges on the system.

SFTP Users

An SFTP user is granted inbound SFTP access to the system and possesses the following abilities:

• Restricted access to the /shared directory on the file system.
• Automated outbound SFTP connections to a remote server that allows secure file transfer from the /shared directory.
• Retrieve the following system files:
  
  • statistics files
  • backup files
  • log files