Is possible to add another user than extreme at EFA?

Alberto_Oter — Thu, 10 Nov 2022 18:21:54 GMT

I'm trying to find a way to create a new user with specific new role locally at EFA, but I'm expecting to use a command as in SLX CLI where we can specify the username, password and role, is there a way to do like that at EFA?

Re: Is possible to add another user than extreme at EFA?

Michael_Morey — Fri, 11 Nov 2022 14:22:43 GMT

Alberto,

Yes this is possible. The actual Username and Password should be setup on the linux subsystem first (TPVM, OVA, or StandAlone):

sudo useradd Alberto

sudo passwd

Within EFA we first designate that this user is permitted to use CLI:

(efa:extreme)extreme@tpvm1:~$ efa auth client register --name Alberto --type cli

Then we map the Role to the user:

(efa:extreme)extreme@tpvm1:~$ efa auth rolemapping add --name Alberto --role SystemAdmin --type user

Here is a list of the current roles:

(efa:extreme)extreme@tpvm1:~$ efa rbac role show
+-----------------+--------------------------------------------------------------+
| Name | Description |
+-----------------+--------------------------------------------------------------+
| NetworkOperator | Views Fabric configurations and Inventory related |
| | information and also all Ecosystem related information. |
| | Cannot make any changes in the system. |
+-----------------+--------------------------------------------------------------+
| SystemAdmin | Complete privileges to all operations in the system |
+-----------------+--------------------------------------------------------------+
| ServiceAdmin | Internal role with limited privileges to service operations |
| | in the system and cannot be assigned to a user |
+-----------------+--------------------------------------------------------------+
| FabricAdmin | Registers devices to fabric, Configures fabric parameters, |
| | Validate all the devices in the fabric and configure |
| | switches for IP Fabric with/without overlay. Also has |
| | privileges to create tenants, creates networks inside |
| | tenants (VRFs, EPGs, POs etc). Also has privileges to |
| | policy, openstack, hyperv, vcenter operations. Performs |
| | fabric debug activities. |
+-----------------+--------------------------------------------------------------+
| SecurityAdmin | Performs user management, PKI and key management operations |
| | in the system. |
+-----------------+--------------------------------------------------------------+
| SystemDebugger | Performs Support Save, System Backup operations. Has |
| | privileges to fabric debug operations. Set debug level for |
| | services. Has privileges to collect execution logs from the |
| | services. |
+-----------------+--------------------------------------------------------------+

You should now be able to login with the new user:

extreme@tpvm1:~$ efa login --username Alberto --password password

Re: Is possible to add another user than extreme at EFA?

Alberto_Oter — Fri, 11 Nov 2022 14:55:15 GMT

Thanks a lot Michael, I was not able to find at any place the part of adding as linux user, that was the missing step, now I'm able to login with my new user 🙂

topic Re: Is possible to add another user than extreme at EFA? in Data Center (SLX)

Is possible to add another user than extreme at EFA?

Re: Is possible to add another user than extreme at EFA?

Re: Is possible to add another user than extreme at EFA?