show x usr Command Display User Properties
Valid in the AC environment
capamsc141
Valid in the AC environment
The show[x]usr command displays the values of all the properties of one or more users defined to
Privileged Access Manager
.Use showusr to display the properties of internal users. Use showxusr to display the properties of enterprise users.
The showusr command also exists in the native environment but operates differently there.
You can always list the properties of your own user record. To list properties of another user's record, one of the following conditions must be true:
- You are the owner of the user record.
- You have at least one of the following attributes: ADMIN, AUDITOR, and OPERATOR.
- The user record is within the scope of a group in which you have at least one of the following group attributes: ADMIN, AUDITOR, OPERATOR.
- You are assigned read authority in the access control list of the USER record in the ADMIN class.
This command has the following format:
{showusr|su |showxusr |sxu } [ {userName |(userName [,userName...]) } ] \
[addprops(propName [,propName...])] \ [next] \ [props( all | propName [,propName...])] \ [useprops(propName[,propName...])] \ [nt|unix]
- addprops(propName[,propName...])Defines properties to be added to the current ruler for this query only.
- nextDisplays parts of the requested data. This option is useful when the query data is larger than the set query size.The maximum query size is determined by the query_size configuration setting. The query size default is set at 100.
- ntDisplays the user Windows' properties in addition to the properties in the database.
- props(all|propName[,propName ...])Defines a new ruler for this class for this query and future queries.
- unixDisplays the user's UNIX properties in addition to the properties in the database.
- userNameDefines the name of a user. It can include wildcard characters.On UNIX, to display the properties of a single user record whose name contains a special character or space, type an extra slash (/) before the group name.If you do not specifyuserName, the command displays the properties of your own user record.
- useprops(propName[,propName ...])Defines a ruler for this query only. The class ruler is unaffected.
Examples
- The user root wants to list the properties of enterprise user Robin. The root has ADMIN and AUDITOR attributes.showxusr Robin
- The user root wants to list the user properties of enterprise users Robin and Leslie. The root has ADMIN and AUDITOR attributes.showxusr (Robin,Leslie)