gmAccounts Command

Usage

gmAccounts --system systemName

gmAccounts --personal --user name --system name
[--description text] [--password word]

gmAccounts --system name --user name [{--enable|--disable}]
[--description
text] [--password word] [--commands list]
[--level {Admin|Operator|User|Viewer}]

gmAccounts

Description

The gmAccounts command is used to manage user access to gmServer and gmConsole using individually assignable user names and passwords. In addition, users may be restricted to specific commands, or user accounts may be enabled and disabled, such as when service personnel require access and then removed once they no longer require access.

The –-personal and –-system options are used to select between a user's personal password information for their systems, and the permitted users and commands for each system.

The –-description option allows the user to specify a brief description of either the user (when working with systems) or system (when working with personal accounts).

The –-enable and –-disable options are only available with system definitions and enable and disable access by the named user.

The –-password option allows the user to specify a password from the command line. This option should be avoided as it may allow the password to be discovered by others.

The –-command option allows the user to specify the commands that the named user will be permitted to execute. The value ALL may be used to specify that all commands may be executed. Commands are separated in the list by comma (“,”) characters.  An exclamation point may be placed in front of a command name to prevent that command from being executed.  For example, "!gmCommand" could be used to prevent a user from executing the gmCommand command.

The --level option allows the user to specify the actions that are permitted to the named user.  Four levels are available (three in releases prior to Version 2.03.02).  The Viewer level has restricted access to the system through the web server interface.  The User level is able to connect to a server and request basic system data.  The Operator level has the same abilities as the User level, but is also able to change the system configuration and request more advanced data.  The Admin level is able to perform all possible actions on a system. At least one user with the Admin level is required to administer a system via the network.

Screen Shots

This screen shot shows four defined systems and the names that the user requires in order to access the system.

This screen shot shows the users who are authorized to access the system “Modbus”

System Accounts

Granting access takes effect when the “Save Updates” option is selected from the "File" menu. Removing access may require that either gmServer or gmConsole is restarted in order to disconnect any connected clients.

Application Notes

The gmAccounts command is not available in the greenMonitor Viewer or greenMonitor Individual Basic Edition license levels.  The number of permitted users and systems may be limited by license level.

The Viewer level is only available in Version 2.03.02 and more recent.

A list of users and their authorized levels is available on the web server using the "Accounts" menu option.