Restricting users or user groups from accessing the Veritas InfoScale Operations Manager console
You can restrict a user or a user group from accessing the Management Server console.
Create a file named
.esmwebdeny and enter the name of the user or the user group whom you want to restrict in the following format.
-
For user: user name @domain name :user
-
For user group: user group name @domain name :group
User and user group names are case-sensitive only for unixpwd domains, for LDAP, AD, and NT domains they are case insensitive.
Web server restart is not required when the file is created or modified. If the user or the user group is already logged in to the Management Server console, the restrictions will be applicable in the subsequent login session.
Following is an example of a
.esmwebdeny file that includes the names of users and user groups who are restricted from accessing the Management Server console.
firstname1_lastname1@veritasdomain.com:user
firstname2_lastname2@veritasdomain.com:user
alpha_usergroup@veritasdomain.com:group
beta_usergroup@veritasdomain.com:group
Place the file at the following location:
-
For Linux-based Management Server: /var/opt/VRTSsfmcs/conf/
-
For Windows-based Management Server (2012 R2): C:\ProgramData\Symantec\VRTSsfmcs\conf\
Precede a comment in the
.esmwebdeny file with "#".
More Information
Related information