Managing User Accounts in Gaia Portal

Important - On Scalable Platforms (ElasticXL, Maestro, and Chassis), you must connect to the Gaia Portal of the applicable Security Group.

In the navigation tree, click User Management > Users.

You can also see your username in the top right corner of the Gaia Portal.

Step

Instructions

1

In the navigation tree, click User Management > Users.

2

Click Add.

3

In the Login Name field, enter the username.

The valid characters (between 1 and 32 characters) are alphanumeric characters, dash (-), and underscore (_).

4

In the Password field, enter the user's password.

All printable characters are allowed. Length is between 6 and 128 characters.

Important - Do not use the asterisk (*) character in the password. User with such password will not be able to log in.

5

In the Confirm Password field, enter the user's password again.

6

In the Real Name field, enter the user's real name or other informative text.

This is an alphanumeric string that can contain spaces.

The default is the user's Login Name with capitalized first letter.

7

In the Home Directory field, enter the user's home directory.

This is the full Linux path name of a directory, to which the user will log in.

Must be a sub-directory of /home/ directory.

If the sub-directory does not already exist, it is created.

8

In the Shell field, select the user's default login shell.

See the explanations in the "Login Shells" section below.

9

Select User must change password at next logon, if you wish to force the user to change the configured password during the next login.

Note - If the user does not log in within the time limit configured in the Gaia Portal > User Management > Password Policy page > Mandatory Password Change section > Lockout users after password expiration > Lockout user after X days, the user may not be able to log in at all.

10

Optional: In the UID field, enter or select the applicable User ID:

  • 0 for administrator users (this is the default option)

  • An integer between 103 and 65533 for non-administrator users (for example, for users with the default shell /usr/bin/scponly - see sk88981)

11*

In the Access Mechanisms section:

  • Select Web to allow this user to access Gaia Portal.

  • Select Clish Access to allow this user to access Gaia Clish.

  • Select Gaia API to allow this user to access Gaia RESTful API (see Check Point Gaia API Reference).

12*

In the Available Roles list:

  1. Select the roles you wish to assign to this user.

    To select several roles:

    1. Press and hold the CTRL key on the keyboard.

    2. Left-click the applicable roles. The selected roles become highlighted.

  2. Click Add >. The selected roles move to the Assigned Roles list.

13

Click OK.

* To configure these settings in Gaia Clish, see Configuring Roles in Gaia Clish.

Shell

Description

/etc/cli.sh

This is the default option.

Lets the user work with the full Gaia Clish.

By default, some basic networking commands (such as ping) are also available.

The Extended Commands in the assigned roles makes it possible to add more Linux commands that can be used (see List of Available Extended Commands in Roles).

User can run the expert command to enter the Bash shell (Expert mode).

/bin/bash

BASH Linux shell.

Lets the user work with the Expert mode.

User can run the clish command to enter the Gaia Clish.

/bin/csh

CSH Linux shell.

User can run the clish command to enter the Gaia Clish.

/bin/sh

SH Linux shell.

User can run the clish command to enter the Gaia Clish.

/bin/tcsh

TCSH Linux shell.

User can run the clish command to enter the Gaia Clish.

/usr/bin/scponly

User is not allowed to log in to Gaia.

User can only connect to Gaia over SCP and transfer files to and from the system.

Other commands are forbidden.

/sbin/nologin

User is not allowed to log in to Gaia.

Step

Instructions

1

In the navigation tree, click User Management > Users.

2

Select the user.

3

Click Edit.

4

In the Real Name field, enter the user's real name or other informative text.

5

In the Home Directory field, enter the user's home directory.

6

In the Shell field, select the user's default login shell.

7

Select User must change password at next logon, if you wish to force the user to change the configured password during the next login.

8

In the Available Roles list, select the roles you wish to assign to this user and click Add >.

9

In the Assigned Roles list, select the roles you wish to remove from this user and click Remove >.

10

Click OK.

Note - For the default users admin and monitor, you can only change the Shell and Roles.

Step

Instructions

1

In the navigation tree, click User Management > Users.

2

Select the user.

3

Click Delete.

4

Click OK to confirm.

Note - You cannot delete the default users admin and monitor.