User

Location in GUI: Admin » AAA » Users » Local Users

Diagram

Classes

aaa (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
users	List	[users]	No

users (apic.fabric_policies.aaa)

Name	Type	Constraint	Mandatory	Default Value
username	String	Regex: ^[a-zA-Z0-9_.-]{1,31}$	Yes
password	String	min: 1, max: 256	Yes
first_name	String	min: 1, max: 32	No
last_name	String	min: 1, max: 32	No
phone	String	min: 1, max: 16	No
email	String	Regex: ^(?!.{64,})[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+$	No
certificate_name	String	min: 1, max: 128	No
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
status	Choice	active, inactive, blocked	No	active
expires	Boolean	true, false	No	false
expire_date	Any	Choice[never] or	No
domains	List	[domains]	No
certificates	List	[certificates]	No
ssh_keys	List	[ssh_keys]	No

domains (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
roles	List	[roles]	No

certificates (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
data	String		Yes

ssh_keys (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
data	String	Regex: ^[a-zA-Z0-9=\n\r/+ _.@-]{1,16384}$	Yes

roles (apic.fabric_policies.aaa.users.domains)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.-]{1,31}$	Yes
privilege_type	Choice	write, read	No	write

Examples

Simple example:

apic:
  fabric_policies:
    aaa:
      users:
        - username: user1
          password: ciscocisco
          domains:
            - name: all
              roles:
                - name: admin
                  privilege_type: write
            - name: common

Full example:

apic:
  fabric_policies:
    aaa:
      users:
        - username: user1
          password: ciscocisco
          expires: false
          first_name: cisco
          last_name: cisco
          phone: '1234567'
          email: cisco@cisco.com
          certificate_name: cisco
          description: descr
          status: active
          domains:
            - name: all
              roles:
                - name: admin
                  privilege_type: write
            - name: common