grant_privs

Grants the privileges to the existing Enterprise Manager user or Enterprise Manager Role.

Note:

To replace an existing Enterprise Manager administrator role, use the modify_role verb.

Format

emcli grant_privs
        -name="username|rolename"
        -privilege="name[;secure_resource_details]"
        [-grant_all_targets_on_host="yes|no"]
        [-separator=privilege="sep_string"]
        [-subseparator=privilege="subsep_string"]

[ ]  indicates that the parameter is optional

Options

name

User name or role name to which privileges will be assigned.
privilege

Privilege to be granted to the Enterprise Manager user or role. You can specify this option more than once.

Specify secure_resource_details as:
```
resource_guid|[resource_column_name1=resource_column_value1
[:resource_column_name2=resource_column_value2]..]"
```
Optionally, you can drop resource column names from this option if you provide resource information in the order described by emcli get_supported_privileges. See the "See Also" section below for more information.
grant_all_targets_on_host

Indicates if the privilege needs to be granted on all targets of the host specified as part of the privilege parameter. The default value is no.
separator=privilege

Specify a string delimiter to use between name-value pairs for the value of the -privilege option. The default separator delimiter is a semi-colon ( ; ).
subseparator=privilege

Specify a string delimiter to use between the name and value in each name-value pair for the value of the -privilege option. The default subseparator delimiter is a colon ( : ).

Examples

Example 1

This example grants these privileges to user1:

Privilege to use any beacon
Full control of the jobs with ID 923470234ABCDFE23018494753091111
Full control on the target host1.example.com:host
Full control on the credential cred1:user2
View Privilege on target with ID 123451234ABCDFE23018494753092222

emcli grant_privs
      -name="user1"
      -privilege="USE_ANY_BEACON"
      -privilege="FULL_JOB;923470234ABCDFE23018494753091111"
      -privilege="FULL_TARGET;TARGET_NAME=host1.example.com:TARGET_TYPE=host"
      -privilege="FULL_CREDENTIAL;CRED_NAME=cred1:CRED_OWNER=user2"
      -privilege="FULL_CREDENTIAL;CRED_GUID=123451234ABCDFE23018494753092222"

Example 2

This example grants target privileges to EM Role : Role1:

emcli grant_privs
      -name="Role1"
      -privilege="FULL_TARGET;TARGET_NAME=host1.example.com:TARGET_TYPE=host"