Creating Additional Users

During installation a user called ‘platform’ is created which has full access to all allowed commands within the restricted environment. This user (and others with the appropriate rights) can then create additional users who are further restricted to only be able to run certain commands. For example a user could be created who can only run diagnostic and logging commands - able to monitor the health of a system but required to escalate any actions.

Users are created, managed and deleted through the user command. To create a new user use:

user add <username>

Note

The <username> text needs to follow the rules below:

• starts with letter (a-z/A-Z)

• followed by one or more of:

  • letters (a-z/A-Z)

  • digits (0-9)

  • full-stop (.)

  • underscore (_)

  • dash (-)

The system will create a Unix user with the name specified and set up to use a restricted shell identical to the platform user. Initially this user’s password is set to match the username but it must be changed on first login. New users start out with no rights and can only run the very basic system commands provided to all users (such as ls).

For SFTP only users, see: Creating and Managing SFTP Users.