aaa.local_user

A locally-authenticated user account.

ACI class	aaaUser
RN	user-{name}
Cursor	LocalUserCursor
Parent	aaa
Atomic	—

Attributes

Accepted as keyword arguments of .local_user(name) and of .set(**attrs) on this cursor. Enum parameters also accept the plain string.

parameter	wire	type	values	default	description
name (positional)	name	str	—	—	The name of the locally-authenticated user.
account_status	accountStatus	AaaAccountStatus	active, blocked, inactive	active	The status of the locally-authenticated user account.
user_cert_attribute	certAttribute	str	—	—	—
clear_password_history	clearPwdHistory	AaaClear	no, yes	no	Allows the administrator to clear the password history of a locally-authenticated user.
description	descr	str	—	—	Specifies a description of the policy definition.
email_address	email	str	—	—	The email address of the locally-authenticated user.
account_expiration_date	expiration	str	—	—	The expiration date of the locally-authenticated user account. The expires property must be enabled to activate an expiration date.
expiration_set_status	expires	AaaBoolean	no, yes	no	A property to enable an expiration date for the locally-authenticated user account.
first_name	firstName	str	—	—	The first name of the locally-authenticated user.
last_name	lastName	str	—	—	The last name of the locally-authenticated user.
otp_enable_flag	otpenable	AaaOtpBoolean	no, yes	no	—
otp_key	otpkey	str	—	—	—
owner_key	ownerKey	str	—	—	The key for enabling clients to own their data for entity correlation.
owner_tag	ownerTag	str	—	—	A tag for enabling clients to add their own data. For example, to indicate who created this object.
phone_number	phone	str	—	—	The phone number of the locally-authenticated user.
password	pwd	str	—	—	The system user password.
password_life_time	pwdLifeTime	int	—	0	The lifetime of the locally-authenticated user password.
password_update_required	pwdUpdateRequired	AaaBoolean	no, yes	no	A boolean value indicating whether this account needs password update
domain_read_write_rules_for_user	rbacString	str	—	—	—
restricted_rbac_user	restrictedRbacUser	AaaBoolean	no, yes	no	—
role_summary	roleSummary	str	—	—	current set of roles (keep explicit for audit log by PD and PM)
unix_user_id	unixUserId	int	—	0	The UNIX identifier of the locally-authenticated user.