Local User Policy

A Local User Policy defines local user accounts and password settings for server management endpoints (IMC/CIMC). It controls who can log in directly to a server’s management interface and with what permissions, independent of central identity services.

Location in Intersight GUI: Policies » Local User

Diagram

Classes

policies (compute.intersight.organizations)

Name	Type	Constraint	Mandatory	Default Value
local_user	List	[local_user]	No

local_user (compute.intersight.organizations.policies)

Name	Type	Constraint	Mandatory	Default Value
name	String	Regex: ^[a-zA-Z0-9_.:-]{1,64}$	Yes
description	String		No
managed	Boolean	true, false	No	true
tags	List	[tags]	No
strong_password	Boolean	true, false	No	true
password_expiry	Boolean	true, false	No	false
password_expiry_duration	Integer	min: 1, max: 3650	No	90
password_history	Integer	min: 0, max: 5	No	5
notification_period	Integer	min: 1, max: 15	No	15
grace_period	Integer	min: 0, max: 5	No	0
always_send_user_password	Boolean	true, false	No	false
users	List	[users]	No

tags (compute.intersight.organizations.policies.local_user)

Name	Type	Constraint	Mandatory	Default Value
key	String		Yes
value	String		Yes

users (compute.intersight.organizations.policies.local_user)

Name	Type	Constraint	Mandatory	Default Value
username	String	Regex: ^[a-zA-Z0-9._-]{1,16}$	Yes
role	Choice	admin, readonly, user	Yes
password	String		No
enabled	Boolean	true, false	No	true

Examples

Example-1: Comprehensive local user policy with password expiry controls and two user accounts — an admin and a read-only auditor.

compute:
  intersight:
    organizations:
      - name: MyOrganization
        policies:
          local_user:
            - name: standard-local-users
              description: Standard local user accounts for server management
              strong_password: true
              password_expiry: true
              password_expiry_duration: 90
              password_history: 5
              notification_period: 15
              grace_period: 1
              tags:
                - key: env
                  value: prod
              users:
                - username: admin
                  role: admin
                  password: !env LOCAL_ADMIN_PASSWORD
                  enabled: true
                - username: auditor
                  role: readonly
                  password: !env LOCAL_AUDITOR_PASSWORD
                  enabled: true

Example-2: Minimal local user policy with a single admin account and no password expiry.

compute:
  intersight:
    organizations:
      - name: MyOrganization
        policies:
          local_user:
            - name: minimal-local-users
              users:
                - username: admin
                  role: admin
                  password: !env LOCAL_ADMIN_PASSWORD