cp_conf admin

Description

Configures Check Point system administrators for the Security Management Server.

Notes:

Multi-Domain Server does not support this command.
Only one administrator can be defined in the cpconfig menu. To define additional administrators, use SmartConsole.
This command corresponds to the option Administrator in the cpconfig menu.

Syntax

cp_conf admin

-h

add [<UserName> <Password> {a | w | r}]

add -gaia [{a | w | r}]

del <UserName1> <UserName2> ...

get

Parameters

Parameter	Description
`-h`	Shows the applicable built-in usage.
`add [<`UserName`> <`Password`> {a \| w \| r}]`	Adds a Check Point system administrator: `<`UserName`>` - Specifies the administrator's username `<`Password`>` - Specifies the administrator's password `a` - Assigns all permissions - read settings, write settings, and manage administrators `w` - Assigns permissions to read and write settings only (cannot manage administrators) `r` - Assigns permissions to only read settings
`add -gaia [{a \| w \| r}]`	Adds the Gaia administrator user `admin`: `a` - Assigns all permissions - read settings, write settings, and manage administrators `w` - Assigns permissions to read and write settings only (cannot manage administrators) `r` - Assigns permissions to only read settings
`del` <UserName1> <UserName2> ...	Deletes the specified system administrators.
`get`	Shows the list of the configured system administrators.
`get -gaia`	Shows the management permissions assigned to the Gaia administrator user `admin`.

Example 1

[Expert@MGMT:0]# cp_conf admin add

Administrator name: admin

Administrator admin already exists.

Do you want to change Administrator's Permissions (y/n) [n] ? y

Permissions for all products (Read/[W]rite All, [R]ead Only All, [C]ustomized) c

Permission for SmartUpdate (Read/[W]rite, [R]ead Only, [N]one) w

Permission for Monitoring (Read/[W]rite, [R]ead Only, [N]one) w

Administrator admin was modified successfully and has

Read/Write Permission for SmartUpdate

Read/Write Permission for Monitoring

[Expert@MGMT:0]#

[Expert@MGMT:0]# cp_conf admin get

The following Administrators

are defined for this Security Management Server:

admin (Read/Write Permission for all products; )

[Expert@MGMT:0]#

Example 2

[Expert@MGMT:0]# cp_conf admin add -gaia

Permissions for all products (Read/[W]rite All, [R]ead Only All, [C]ustomized) C

Permission for SmartUpdate (Read/[W]rite, [R]ead Only, [N]one) w

Permission for Monitoring (Read/[W]rite, [R]ead Only, [N]one) w

Administrator admin was added successfully and has

Read/Write Permission for SmartUpdate

Read/Write Permission for Monitoring

[Expert@MGMT:0]#

[Expert@MGMT:0]# cp_conf admin get -gaia

The following Administrators

are defined for this Security Management Server:

admin (Read/Write Permission for all products; ) - Gaia admin

[Expert@MGMT:0]#

[Expert@MGMT:0]# cp_conf admin add -gaia a

Administrator admin already exists.

Administrator admin was modified successfully and has

Read/Write Permission for all products with Permission to Manage Administrators

[Expert@MGMT:0]#

[Expert@MGMT:0]# cp_conf admin add -gaia w

Administrator admin already exists.

Administrator admin was modified successfully and has

Read/Write Permission for all products without Permission to Manage Administrators

[Expert@MGMT:0]#

[Expert@MGMT:0]# cp_conf admin add -gaia r

Administrator admin already exists.

Administrator admin was modified successfully and has

Read Only Permission for all products

[Expert@MGMT:0]#