Disables a user account so that no new sessions are accepted for the account, or limits the local access for the user. Existing user sessions are not terminated. Only the Admin role can disable or limit other user accounts; users of any role can limit their own local access.
Syntax
username <username> disable [ login | local-login | curr-password <currentPassword>]
Parameters
username
Name of the user account to be disabled or given limited or no local access.
login
Specifies that the user cannot log in to an appliance locally using a password, but can do so using an SSH authorized key.
local-login
Specifies that the user cannot log in to an appliance locally, but can log in remotely.
curr-password <password>
Specifies the current password of the user entering this command. If this parameter is not supplied and if the system is configured to require the current password for password changes, the system prompts for the current password.
Examples
The following example disables the "jsmith" user account.
hostname (config) # username jsmith disable
The following example prevents the "tjones" user from logging in to the appliance locally. In this scenario, "tjones" is entering the command, and the system is configured to require the current password for password changes.
hostname (config) # username tjones disable local-login curr-password password1234
Supported appliances
Command parameter curr-password introduced in Release 2021.3 for all appliances.