cp_conf admin

Description

Configures Check Point system administrators for the Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server..

Notes:

Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. does not support this command.
Only one administrator can be defined in the cpconfig menu.

To define additional administrators, use SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on..
This command corresponds to the option Administrator in the cpconfig menu.

Syntax

cp_conf admin

-h

add [<UserName> <Password> {a | w | r}]

add -gaia [{a | w | r}]

del <UserName1> <UserName2> ...

get

Parameters

Parameter	Description
`-h`	Shows the applicable built-in usage.
`add [<UserName> <Password> {a \| w \| r}]`	Adds a Check Point system administrator: `<UserName>` - Specifies the administrator's username `<Password>` - Specifies the administrator's password `a` - Assigns all permissions - read settings, write settings, and manage administrators `w` - Assigns permissions to read and write settings only (cannot manage administrators) `r` - Assigns permissions to only read settings
`add -gaia [{a \| w \| r}]`	Adds the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. administrator user `admin`: `a` - Assigns all permissions - read settings, write settings, and manage administrators `w` - Assigns permissions to read and write settings only (cannot manage administrators) `r` - Assigns permissions to only read settings
`del <UserName1> <UserName2> ...`	Deletes the specified system administrators.
`get`	Shows the list of the configured system administrators.
`get -gaia`	Shows the management permissions assigned to the Gaia administrator user `admin`.

Example 1 - Adding a Check Point system administrator

[Expert@MGMT:0]# cp_conf admin add
Administrator name: admin
Administrator admin already exists.
Do you want to change Administrator's Permissions (y/n) [n] ? y
 
Permissions for all products (Read/[W]rite All, [R]ead Only All, [C]ustomized) c
        Permission for SmartUpdate (Read/[W]rite, [R]ead Only, [N]one) w
        Permission for Monitoring (Read/[W]rite, [R]ead Only, [N]one) w
 
Administrator admin was modified successfully and has
Read/Write Permission for SmartUpdate
Read/Write Permission for Monitoring
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin get
 
The following Administrators
are defined for this Security Management Server:
 
admin (Read/Write Permission for all products; )
[Expert@MGMT:0]#

Example 2 - Adding the Gaia administrator user

[Expert@MGMT:0]# cp_conf admin add -gaia
Permissions for all products (Read/[W]rite All, [R]ead Only All, [C]ustomized) c
        Permission for SmartUpdate (Read/[W]rite, [R]ead Only, [N]one) w
        Permission for Monitoring (Read/[W]rite, [R]ead Only, [N]one) w
Administrator admin was added successfully and has
Read/Write Permission for SmartUpdate
Read/Write Permission for Monitoring
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin get -gaia
 
The following Administrators
are defined for this Security Management Server:
 
admin (Read/Write Permission for all products; ) - Gaia admin
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin add -gaia a
Administrator admin already exists.
 
Administrator admin was modified successfully and has
Read/Write Permission for all products with Permission to Manage Administrators
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin add -gaia w
Administrator admin already exists.
 
Administrator admin was modified successfully and has
Read/Write Permission for all products without Permission to Manage Administrators
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin add -gaia r
Administrator admin already exists.
 
Administrator admin was modified successfully and has
Read Only Permission for all products
[Expert@MGMT:0]#