Lists the current usernames and displays information about each account. The list separates usernames by account type:
User accounts―User account roles give system administrators finer control over what users can do and see on the appliance. Each user account is associated with a single role, which is a collection of capabilities that allow the user to perform certain operations. A default user account is provided for each of the user roles, depending on your appliance type.
System accounts―System accounts are “reserved accounts” that permit remote login for the purpose of specific Trellix system-internal communication. Local password login to these accounts is disabled by default. The user cannot log in to the appliance locally using a password, but can log in using an SSH authorized key.
For information about each account type and the roles within each type, see “User Accounts and System Accounts” in the Trellix System Security Guide.
Syntax
show usernames
Parameters
None
Output fields
The following paragraphs describe the output fields of the show usernames command.
USERNAME
Name with which the user logs in to the appliance.
FULL NAME
Full name of the user.
ROLE
Role that determines what the user can do on the appliance.
ACCOUNT STATUS
Account status that determines whether and how the user can log in to the appliance locally.
Password set—User can log in to the appliance locally using a username and password.
Local password login disabled—User cannot log in to the appliance locally using a password, but can log in using an SSH authorized key.
Local login disabled—User cannot log in to an appliance locally, using either a password or an SSH authorized key. A user with this account status can still authenticate remotely and be mapped to this user account.
Account locked out—User cannot log in at all. This could be because the account was configured this way explicitly, or due to too many unsuccessful login attempts.
Example
The following example shows information about the default user accounts and system accounts.
hostname > show usernames User Accounts ------------- USERNAME FULL NAME ROLE ACCOUNT STATUS admin System Administrator admin Password set analyst System Analyst analyst Password set api_analyst API Analyst api_analyst Password set api_monitor API Monitor api_monitor Password set auditor System Auditor auditor Password set fe_services FireEye Services User fe_services Password set monitor System Monitor monitor Password set operator System Operator operator Password set reject Reject User Account locked out System Accounts --------------- USERNAME FULL NAME ROLE ACCOUNT STATUS ccd_node ccd_node user ccd_node Local password login disabled ccd_sensor ccd_sensor user ccd_sensor Local password login disabled cmcrendv CMC Rendezvous User cmcrendv Password set hasync HA synchronization user hasync Password set Remote access for admin user: enabled
User role
Admin, Operator, Monitor, Analyst, Auditor, api_analyst, api_monitor, or fe_services.
Note
For users with the Analyst and Auditor roles, this command only returns information about their own accounts.
Command mode
Enable
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Before Release 7.5.0
Central Management System: Before Release 7.5.0
Email Security — Server: Before Release 7.6.0
Malware Analysis: Before Release 7.7.0
File Protect: Before Release 7.7.0
Intelligent Virtual Execution - Server: Release 7.9.0