Skip to main content

vserver cifs users-and-groups privilege remove-privilege

Contributors
Suggest changes
PDFs

Remove privileges from a user or group

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The vserver cifs users-and-groups privilege remove-privilege command removes privileges from a local or Active Directory user or group. This command creates a new or modifies an existing privilege entry.

Parameters

-vserver <vserver name> - Vserver

This specifies the name of the Vserver.

-user-or-group-name <CIFS name> - User or Group Name

This specifies the name of the local or Active Directory user or group.

-privileges <Privilege>,…​ - Privileges

This specifies the list of privileges to be removed from this user or group.

Examples

The following example removes the previously added "SeTcbPrivilege" and "SeTakeOwnershipPrivilege" privileges from the user "CIFS_SERVER\u1".

cluster1::> vserver cifs users-and-groups privilege show
Vserver        User or Group Name           Privileges
-------------- ---------------------------- -------------------
vs1            CIFS_SERVER\u1               SeTcbPrivilege
                                            SeTakeOwnershipPrivilege

cluster1::> vserver cifs users-and-groups privilege remove-privilege -vserver vs1 -user-or-group-name CIFS_SERVER\u1 -privileges SeTcbPrivilege,SeTakeOwnershipPrivilege

cluster1::> vserver cifs users-and-groups privilege show
Vserver        User or Group Name           Privileges
-------------- ---------------------------- -------------------
vs1            CIFS_SERVER\u1               -
+ + The following example removes "SeBackupPrivilege" from the group "BUILTIN\Administrators".
cluster1::> vserver cifs users-and-groups privilege show
This table is currently empty.

cluster1::> vserver cifs users-and-groups privilege remove-privilege -vserver vs1 -user-or-group-name BUILTIN\Administrators -privileges SeBackupPrivilege

cluster1::> vserver cifs users-and-groups privilege show
Vserver        User or Group Name           Privileges
-------------- ---------------------------- -------------------
vs1            BUILTIN\Administrators       SeRestorePrivilege
                                            SeSecurityPrivilege
                                            SeTakeOwnershipPrivilege