Create local groups
You can create local groups that can be used for authorizing access to data associated with the SVM over an SMB connection. You can also assign privileges that define what user rights or capabilities a member of the group has.
Local group functionality is enabled by default when the SVM is created.
When you create a local group, you must specify a name for the group and you must specify the SVM with which to associate the group. You can specify a group name with or without the local domain name, and you can optionally specify a description for the local group. You cannot add a local group to another local group.
The vserver cifs users-and-groups local-group
man pages contain details about optional parameters and naming requirements.
-
Create the local group:
vserver cifs users-and-groups local-group create -vserver vserver_name -group-name group_name
The following optional parameter might be useful:
-
-description
A description for the local group.
-
-
Verify that the group was successfully created:
vserver cifs users-and-groups local-group show -vserver vserver_name
The following example creates a local group “SMB_SERVER01\engineering” associated with SVM vs1:
cluster1::> vserver cifs users-and-groups local-group create -vserver vs1.example.com -group-name SMB_SERVER01\engineering cluster1::> vserver cifs users-and-groups local-group show -vserver vs1.example.com Vserver Group Name Description ---------------- ---------------------------- ---------------------------- vs1.example.com BUILTIN\Administrators Built-in Administrators group vs1.example.com BUILTIN\Backup Operators Backup Operators group vs1.example.com BUILTIN\Power Users Restricted administrative privileges vs1.example.com BUILTIN\Users All users vs1.example.com SMB_SERVER01\engineering vs1.example.com SMB_SERVER01\sales
You must add members to the new group.