NSX-T Data Center Global Manager REST API

# *************************************************************************** # Copyright 2020-2024 VMware, Inc. All rights reserved. VMware Confidential. # ***************************************************************************

NodeUserProperties (schema)

Node user properties

Name Description Type Notes
_links References related to this resource

The server will populate this field when returing the resource. Ignored on PUT and POST.
array of ResourceLink Readonly
_schema Schema for this resource string Readonly
_self Link to this resource SelfResourceLink Readonly
account_expires Node local user account expiration date (ISO-8601 date form, i.e. YYYY-MM-DD) or null when never expires string Readonly
account_type Node local user account type string Readonly
Enum: administrator, audit, guest, root, service, system
full_name Full name for the user string
group_id Primary group id for the user integer Readonly
Minimum: 0
Maximum: 2147483647
home_dir The absolute path of user home directory string Readonly
last_password_change Number of days since password was last changed integer Readonly
Minimum: 0
Maximum: 2147483647
last_password_change_epoch Node local user account last password change Unix Epoch timestamp or 0 when never changed integer Readonly
locked List indicating user is currently locked out for target interface

http when the user account is currently locked to make any web
authentication requests, because of many consecutive failed authentication attempts
was made for a respective user (at max of configured auth-policy
api_failed_auth_lockout_period).


cli when the user account is currently locked to make any NSX-CLI
authentication requests as per configured cli-lockout policy


Property is available only when list node users is issued with query parameter -
internal=true, check ListNodeUsers [GET] /api/v1/node/users for more details.


array of string Readonly
login_shell The absolute path of login shell string Readonly
old_password Old password for the user (required on PUT if password specified) string
password Password for the user (optionally specified on PUT, unspecified on GET) string
password_change_frequency Number of days password is valid before it must be changed

Number of days password is valid before it must be changed. This can be set to 0 to indicate no password change is required or a positive integer up to 9999. For following account_types - root, administrator, audit, guest, VCF password management policy's passwordExpirationDays will be preferred by default, further overriding in request will error out with 409 CONFLICT. For other account_types, or when no VCF password management policy is configured, the default value is 90.
integer Minimum: 0
Maximum: 99999
Default: "90"
password_change_warning Number of days before user receives warning message of password expiration integer Minimum: 0
Maximum: 99999
Default: "7"
password_expires Node local user account password expiration date (ISO-8601 date form, i.e. YYYY-MM-DD) or null when never expires string Readonly
password_expires_epoch Node local user account password expiration Unix Epoch timestamp or 0 when never expires integer Readonly
password_reset_required Boolean value that states if a password reset is required boolean
status User status

Status of the user. This value can be ACTIVE indicating authentication attempts will be successful if the correct credentials are specified. The value can also be PASSWORD_EXPIRED indicating authentication attempts will fail because the user's password has expired and must be changed. Or, this value can be NOT_ACTIVATED indicating the user's password has not yet been set and must be set before the user can authenticate.
string Readonly
Enum: ACTIVE, PASSWORD_EXPIRED, NOT_ACTIVATED
userid Numeric id for the user integer Readonly
Minimum: 0
Maximum: 2147483647
username User login name (must be "root" if userid is 0) string Minimum length: 1
Maximum length: 32
Pattern: "^[a-zA-Z][a-zA-Z0-9-_.\-]*$"