Information Technology Reference
In-Depth Information
2.
Supply a login and (optionally) a UID and username.
If you do not supply a UID, the system will assign the next available UID, starting at
500. If the ESXi host is being managed by vCenter Server, UID 500 might already be
taken by the vpxuser account, which we'll explain later in this chapter in the section
“Understanding the vpxuser Account.”
3.
Enter and coni rm the password for the new user account.
4.
If you want this user to be able to use the ESXi Shell, check Grant Shell Access To
This User.
5.
Under Group Membership, select a group from the drop-down and click Add.
6.
Click OK to create the user with the specii ed values.
The new user appears in the list of users.
In the section “Managing ESXi Host Permissions,” we'll show you how to assign a role to this
user to control what actions the user is allowed to perform.
Adding “root” Users to vSphere
Prior to vSphere 5.1, no functionality existed to create additional accounts with the same privileges
as the built-in root account; everyone had to share the root account. h is meant that whenever an
escalated task was performed, it was impossible to relate that action back to a particular person.
From vSphere 5.1 onward, the local ESXi “root” group gives actual “root” permissions.
Perform these steps to create a local group using the vSphere Client:
1.
Click the Groups button near the top of the Local Users & Groups tab.
2.
Right-click a blank area of the tab and select Add.
This opens the Create New Group dialog box.
3.
Specify a group name and, optionally, a group ID.
If you do not specify a group ID, the system will assign one automatically, starting with 500.
4.
From the drop-down list, select the user you'd like to add to this group and click Add.
Repeat the process for each user you want to add.
5.
Click OK to create the group and return to the vSphere Client.
The new group will appear in the list of groups on the Local Users & Groups tab.
You can also use the CLI to create users and groups. From the vMA, you can use the vicfg-
user command to create users and groups on a specii c ESXi host.
Perform these steps to create a user or group using the CLI:
1.
Establish an SSH session to the vMA.
2.
From the vMA command prompt, enter this command to create a new user account on a
specii c ESXi host:
vicfg-user --server server.domain.com --username root --entity user --login
LoginName --operation add
