manager unassign

Prev Next

This command removes management functions from a VMS manager user.

Usage

manager assign --id ID
              [--realm events|hardware|logical|monitoring|security|settings|support] 
              [--permissions create|view|edit|delete]
              [--object-type TYPE]
              [--object-id ID]
              [--ldap-groups]
              [--tenant-ids]

Required Parameters

--id ID

Identifies the manager from which to remove permissions for management functions.

Options

--realm events|hardware| logical|monitoring| security|settings|support

Specifies a realm of management functions for which to remove permissions from the manager.

--permissions create|view|edit|delete

Removes the specified permissions for the realm set with --realm.

--object-type TYPE and

This option is used together with --object-id to remove permissions set with --permissions for a certain object.

Use --object-type to supply the type of the object and then further limit the scope by specifying the --object-id.

Specify one of the following object types as TYPE:

  • cluster

  • cnode

  • dnode

  • dbox

  • cbox

  • view

  • viewpolicy

  • quota

  • vippool

  • eventdefinition

  • ldap

---object-id ID

Removes permissions set with --permissions for the object identified with --object-id of the object type specified with --object-type.

--ldap-groups GROUPS

Specify a LDAP group name or a comma--separated list of LDAP group names.

--tenant-id ID

Specify a tenant ID or a comma-separated list of tenant IDs.

Example

To prohibit editing events by a manager with ID 6:

vcli: admin> manager unassign --id 6 --realm events --permissions edit