Shockingly, William Lam has the answer.
Original Message:
Sent: Aug 27, 2024 09:02 AM
From: StuDuncanHPE
Subject: Using esxcli command instead of PowerCLI for managing ESX Admins
Well, except that doesn't show the actual settings for the ESXAdminsGroup.
esxcli system settings advanced list | grep -i esx
esxcli system settings kernel list | grep -i esx
shows nothing about groups.
Original Message:
Sent: Aug 26, 2024 07:13 PM
From: Josh Atwell
Subject: Using esxcli command instead of PowerCLI for managing ESX Admins
That's just an advanced setting, see here for how to update w/ esxcli:
https://knowledge.broadcom.com/external/article/310338/configuring-advanced-options-for-esxiesx.html
Original Message:
Sent: Aug 26, 2024 04:56 PM
From: StuDuncanHPE
Subject: Using esxcli command instead of PowerCLI for managing ESX Admins
Background - automated building of ESXi includes a ks.cfg file that sets up lot of things for us, but doesn't allow powercli. Things like local accts, networks, ntp, syslog, bind to AD, add local AD accts, etc.
These all use either bash commands or esxcli commands.
One thing I can't seem to do is set the ESX Admins group to a specific AD group.
Per this kb, you can disable it, but that's not what I'm looking to do.
https://knowledge.broadcom.com/external/article/369707/
But per that kb, I would love to set "Config.HostAgent.plugins.hostsvc.esxAdminsGroup" to my specific AD group.
Is there any way to do this while using bash or esxcli commands, and not using powercli?
Thanks,
Stu