User

Location in GUI: Admin » AAA » Users » Local Users

Diagram

Classes

apic

Name	Type	Constraint	Mandatory	Default Value
fabric_policies	Class	fabric_policies	No

fabric_policies (apic)

Name	Type	Constraint	Mandatory	Default Value
aaa	Class	aaa	No

aaa (apic.fabric_policies)

Name	Type	Constraint	Mandatory	Default Value
users	List	users	No

users (apic.fabric_policies.aaa)

Name	Type	Constraint	Mandatory	Default Value
username	String	Regex: ^[a-zA-Z0-9_.-]{1,31}$	Yes
password	String	min: 1, max: 256	Yes
first_name	String	min: 1, max: 32	No
last_name	String	min: 1, max: 32	No
phone	String	min: 1, max: 16	No
email	String	Regex: ^(?!.{64,})[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+$	No
certificate_name	String	min: 1, max: 128	No
description	String	Regex: ^[a-zA-Z0-9\\!#$%()*,-./:;@ _{|}~?&+]{1,128}$	No
status	Choice	active, inactive, blocked	No	active
expires	Boolean	true, false	No	false
expire_date	Any	Choice[never] or	No
domains	List	domains	No
certificates	List	certificates	No
ssh_keys	List	ssh_keys	No

domains (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
roles	List	roles	No

certificates (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
data	String		Yes

ssh_keys (apic.fabric_policies.aaa.users)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
data	String	Regex: ^[a-zA-Z0-9=\n\r/+ _.@-]{1,16384}$	Yes

roles (apic.fabric_policies.aaa.users.domains)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.-]{1,31}$	Yes
privilege_type	Choice	write, read	No	write

Examples

Simple example:

apic:
  fabric_policies:
    aaa:
      users:
        - username: user1
          password: ciscocisco
          domains:
            - name: all
              roles:
                - name: admin
                  privilege_type: write
            - name: common

Full example:

apic:
  fabric_policies:
    aaa:
      users:
        - username: user1
          password: ciscocisco
          expires: false
          first_name: cisco
          last_name: cisco
          phone: '1234567'
          email: cisco@cisco.com
          certificate_name: cisco
          description: descr
          status: active
          domains:
            - name: all
              roles:
                - name: admin
                  privilege_type: write
            - name: common