User

Location in GUI: Admin » AAA » Users » Local Users

Diagram

Classes

aaa (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
users	List	`[users]`	No

users (apic.fabric_policies.aaa)

Name	Type	Constraint	Mandatory	Default Value
username	String	Regex: `^[a-zA-Z0-9_.-]{1,31}$`	Yes
password	String	min: `1`, max: `256`	Yes
first_name	String	min: `1`, max: `32`	No
last_name	String	min: `1`, max: `32`	No
phone	String	min: `1`, max: `16`	No
email	String	Regex: `^(?!.{64,})[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+$`	No
certificate_name	String	min: `1`, max: `128`	No
description	String	Regex: `^[a-zA-Z0-9\\!#$%()*,-./:;@ _{\|}~?&+]{1,128}$`	No
status	Choice	`active`, `inactive`, `blocked`	No	`active`
expires	Boolean	`true`, `false`	No	`false`
expire_date	Any	Choice[`never`] or	No
domains	List	`[domains]`	No
certificates	List	`[certificates]`	No
ssh_keys	List	`[ssh_keys]`	No

domains (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
roles	List	`[roles]`	No

certificates (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
data	String		Yes

ssh_keys (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.:-]{1,64}$`	Yes
data	String	Regex: `^[a-zA-Z0-9=\n\r/+ _.@-]{1,16384}$`	Yes

roles (apic.fabric_policies.aaa.users.domains)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: `^[a-zA-Z0-9_.-]{1,31}$`	Yes
privilege_type	Choice	`write`, `read`	No	`write`

Examples

Simple example:

apic:
  fabric_policies:
    aaa:
      users:
        - username: user1
          password: ciscocisco
          domains:
            - name: all
              roles:
                - name: admin
                  privilege_type: write
            - name: common

Full example:

apic:
  fabric_policies:
    aaa:
      users:
        - username: user1
          password: ciscocisco
          expires: false
          first_name: cisco
          last_name: cisco
          phone: '1234567'
          email: cisco@cisco.com
          certificate_name: cisco
          description: descr
          status: active
          domains:
            - name: all
              roles:
                - name: admin
                  privilege_type: write
            - name: common