2.4.6.2.1 Creating TACACS+ Managed Users

The -u flag supports multiple users at once in comma separated format. The -g flag can be used to provide primary group to the mentioned users. If not provided, tacacs is set as the default primary group for all the provided users. The -G flag supports adding the users to secondary groups to allow adding a user to multiple groups.

/usr/TKLC/appworks/bin/tacacsCliAuthentication create-user -u <user1>[,<user2>] -A <ACCESS_METHOD> [-g <primary_group>] [-G <secondary_group1>[,<secondary_group2>]]

Example:

/usr/TKLC/appworks/bin/tacacsCliAuthentication create-user -u john -A ssh -g admgrp -G awadm

 Similar to admusr group set:
/usr/TKLC/appworks/bin/tacacsCliAuthentication create-user -u john -A ssh -g admgrp -G sys,secgrp,awadm,awftp,tacacs

 For one host only:
 /usr/TKLC/appworks/bin/tacacsCliAuthentication --hostnames <hostname1> create-user -u john -A ssh -g admgrp -G awadm,tacacs

Note:

• Both -g and -G are optional. If a primary group is not provided, users are added to tacacs as their primary group. If secondary groups are not provided, the script still adds the required TACACS group. Additional groups are added only when -G is provided.
• Local usernames must be valid Linux account names accepted by useradd. Do not use characters such as @, spaces, commas, slashes, colons, or a leading dash in the username. For example, do not create [e-mail] locally using this tool.