cp_conf admin

Description

Configures Check Point system administrators for the Security Management Server.

Notes:

Multi-Domain Server does not support this command.
Only one administrator can be defined in the cpconfig menu.

To define additional administrators, use SmartConsole.
This command corresponds to the option Administrator in the cpconfig menu.

Syntax

cp_conf admin

-h

add [<UserName> <Password> {a | w | r}]

add -gaia [{a | w | r}]

del <UserName1> <UserName2> ...

get

Parameters

Parameter	Description
`-h`	Shows the applicable built-in usage.
`add [<UserName> <Password> {a \| w \| r}]`	Adds a Check Point system administrator: `<UserName>` - Specifies the administrator's username `<Password>` - Specifies the administrator's password `a` - Assigns all permissions - read settings, write settings, and manage administrators `w` - Assigns permissions to read and write settings only (cannot manage administrators) `r` - Assigns permissions to only read settings
`add -gaia [{a \| w \| r}]`	Adds the Gaia administrator user `admin`: `a` - Assigns all permissions - read settings, write settings, and manage administrators `w` - Assigns permissions to read and write settings only (cannot manage administrators) `r` - Assigns permissions to only read settings
`del <UserName1> <UserName2> ...`	Deletes the specified system administrators.
`get`	Shows the list of the configured system administrators.
`get -gaia`	Shows the management permissions assigned to the Gaia administrator user `admin`.

Example 1 - Adding a Check Point system administrator

[Expert@MGMT:0]# cp_conf admin add
Administrator name: admin
Administrator admin already exists.
Do you want to change Administrator's Permissions (y/n) [n] ? y
 
Permissions for all products (Read/[W]rite All, [R]ead Only All, [C]ustomized) c
        Permission for SmartUpdate (Read/[W]rite, [R]ead Only, [N]one) w
        Permission for Monitoring (Read/[W]rite, [R]ead Only, [N]one) w
 
Administrator admin was modified successfully and has
Read/Write Permission for SmartUpdate
Read/Write Permission for Monitoring
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin get
 
The following Administrators
are defined for this Security Management Server:
 
admin (Read/Write Permission for all products; )
[Expert@MGMT:0]#

Example 2 - Adding the Gaia administrator user

[Expert@MGMT:0]# cp_conf admin add -gaia
Permissions for all products (Read/[W]rite All, [R]ead Only All, [C]ustomized) c
        Permission for SmartUpdate (Read/[W]rite, [R]ead Only, [N]one) w
        Permission for Monitoring (Read/[W]rite, [R]ead Only, [N]one) w
Administrator admin was added successfully and has
Read/Write Permission for SmartUpdate
Read/Write Permission for Monitoring
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin get -gaia
 
The following Administrators
are defined for this Security Management Server:
 
admin (Read/Write Permission for all products; ) - Gaia admin
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin add -gaia a
Administrator admin already exists.
 
Administrator admin was modified successfully and has
Read/Write Permission for all products with Permission to Manage Administrators
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin add -gaia w
Administrator admin already exists.
 
Administrator admin was modified successfully and has
Read/Write Permission for all products without Permission to Manage Administrators
[Expert@MGMT:0]#
 
[Expert@MGMT:0]# cp_conf admin add -gaia r
Administrator admin already exists.
 
Administrator admin was modified successfully and has
Read Only Permission for all products
[Expert@MGMT:0]#