Foglight 5.9.1 - Command-Line Reference Guide

Foglight™ manages users’ access through groups and roles. Each user belongs to one or more groups and each group can have one or more roles. The set of tasks that a user has access to depends on the roles that are assigned the groups that user belongs to.

This section contains reference information on commands that can be used to manage security settings in Foglight. For complete information about the security principles in Foglight, see the Administration and Configuration Help.

assigngroup

The assigngroup command adds or removes a Foglight™ user account from a group. A user can belong to one or more groups.


	NOTE: You can run this command only if the user account you are using to log into fglcmd has a Security role. For information about fglcmd connection options, see Logging In and Setting the Scope . For complete information about users, roles, and groups in Foglight, see the Administration and Configuration Help.

Scope

security

Syntax

fglcmd connection_options -cmd security:assigngroup -username user_name

-groupname group_name [-remove]

Table 27. Options and arguments
Option	Argument	Description
connection_options		Specifies the user name and password for the Foglight Management Server, as well as the machine name and port number, if necessary. Alternatively, fglcmd can retrieve this information from a user-specific properties file. For more information on how to specify connection options on the command line, see Logging In and Setting the Scope . For details on using a properties file, see Using a Properties File to Supply Connection Information .
groupname	group_name	Specifies the name of the group to which the user account is to be added or removed.
remove	None	Indicates that the user should be removed from the group.
username	user_name	Specifies the name of the user account that is to be added or removed from the group.

Example

Adding a user to a group

C:\Quest\Foglight\bin>fglcmd -usr foglight -pwd foglight

-cmd security:assigngroup -username Demo -groupname MyGroup


	NOTE: If successful, this command does not generate any output.

Removing a user from a group

C:\Quest\Foglight\bin>fglcmd -usr foglight -pwd foglight

-cmd security:assigngroup -username Demo -groupname MyGroup -remove


	NOTE: If successful, this command does not generate any output.

See also

•

createuser

•

deleteuser

assignrole

The assignrole command adds or removes a Foglight™ role from a group. A group can have one or more roles.


	NOTE: You can run this command only if the user account you are using to log into fglcmd has a Security role. For information about fglcmd connection options, see Logging In and Setting the Scope . For complete information about users, roles, and groups in Foglight, see the Administration and Configuration Help.

Scope

security

Syntax

fglcmd connection_options -cmd security:assignrole -groupname group_name

-rolename role_name [-remove]

Table 28. Options and arguments
Option	Argument	Description
connection_options		Specifies the user name and password for the Foglight Management Server, as well as the machine name and port number, if necessary. Alternatively, fglcmd can retrieve this information from a user-specific properties file. For more information on how to specify connection options on the command line, see Logging In and Setting the Scope . For details on using a properties file, see Using a Properties File to Supply Connection Information .
groupname	group_name	Specifies the name of the group to which the role is to be added or removed.
remove	None	Indicates that the role should be removed from the group.
rolename	role_name	Specifies the name of the role that is to be added or removed from the group.

Example

Adding a role to a group

C:\Quest\Foglight\bin>fglcmd -usr foglight -pwd foglight

-cmd security:assignrole -groupname MyGroup -rolename Operator


	NOTE: If successful, this command does not generate any output.

Removing a role from a group

C:\Quest\Foglight\bin>fglcmd -usr foglight -pwd foglight

-cmd security:assignrole -groupname MyGroup -rolename Operator

-remove


	NOTE: If successful, this command does not generate any output.

See also

•

creategroup

•

deletegroup

creategroup

The creategroup command creates a Foglight™ group. A group can have one or more users, and can be assigned one or more Foglight roles. When you create a group, that group has no roles assigned to it. Use the assignrole command to add a role to a group.


	NOTE: You can run this command only if the user account you are using to log into fglcmd is granted the Security role. For information about fglcmd connection options, see Logging In and Setting the Scope . For complete information about users, roles, and groups in Foglight, see the Administration and Configuration Help.

Scope

security

Syntax

fglcmd connection_options -cmd security:creategroup -groupname group_name

Table 29. Options and arguments
Option	Argument	Description
connection_options		Specifies the user name and password for the Foglight Management Server, as well as the machine name and port number, if necessary. Alternatively, fglcmd can retrieve this information from a user-specific properties file. For more information on how to specify connection options on the command line, see Logging In and Setting the Scope . For details on using a properties file, see Using a Properties File to Supply Connection Information .
groupname	group_name	Specifies the name of the group that is to be created.