components:
  schemas:
    ManagerAccount_v1_9_5_Actions:
      additionalProperties: false
      description: The available actions for this resource.
      properties:
        Oem:
          $ref: '#/components/schemas/ManagerAccount_v1_9_5_OemActions'
          description: The available OEM-specific actions for this resource.
          x-longDescription: This property shall contain the available OEM-specific
            actions for this resource.
          x-versionAdded: v1_1_0
      type: object
      x-longDescription: This type shall contain the available actions for this resource.
      x-patternProperties:
        ^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\.[a-zA-Z_][a-zA-Z0-9_]*$:
          description: This property shall specify a valid odata or Redfish property.
    ManagerAccount_v1_9_5_Links:
      additionalProperties: false
      description: The links to other resources that are related to this resource.
      properties:
        Oem:
          $ref: http://redfish.dmtf.org/schemas/v1/Resource.yaml#/components/schemas/Resource_Oem
          description: The OEM extension property.
          x-longDescription: This property shall contain the OEM extensions.  All
            values for properties contained in this object shall conform to the Redfish
            Specification-described requirements.
        Role:
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_idRef
          description: The link to the Redfish role that defines the privileges for
            this account.
          readOnly: true
          x-longDescription: This property shall contain a link to a resource of type
            `Role`, and should link to the resource identified by the `RoleId` property.
      type: object
      x-longDescription: This Redfish Specification-described type shall contain links
        to resources that are related to but are not contained by, or subordinate
        to, this resource.
      x-patternProperties:
        ^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\.[a-zA-Z_][a-zA-Z0-9_]*$:
          description: This property shall specify a valid odata or Redfish property.
    ManagerAccount_v1_9_5_ManagerAccount:
      additionalProperties: false
      description: The `ManagerAccount` schema defines the user accounts that are
        owned by a manager.  Changes to a manager account might affect the current
        Redfish service connection if this manager is responsible for the Redfish
        service.
      properties:
        '@odata.context':
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_context
        '@odata.etag':
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_etag
        '@odata.id':
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_id
        '@odata.type':
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_type
        AccountExpiration:
          description: Indicates the date and time when this account expires.  If
            `null`, the account never expires.
          format: date-time
          nullable: true
          readOnly: false
          type: string
          x-longDescription: This property shall contain the date and time when this
            account expires.  The service shall disable or delete an account that
            has expired.  This property shall not apply to accounts created by the
            Redfish Host Interface Specification-defined credential bootstrapping.  If
            the value is `null`, or the property is not present, the account never
            expires.
          x-versionAdded: v1_8_0
        AccountTypes:
          description: The list of services in the manager that the account is allowed
            to access.
          items:
            oneOf:
            - $ref: http://redfish.dmtf.org/schemas/v1/ManagerAccount.yaml#/components/schemas/ManagerAccount_AccountTypes
            - enum:
              - null
          readOnly: false
          type: array
          x-longDescription: This property shall contain an array of the various manager
            services that the account is allowed to access.  This shall not include
            functionality for receiving events or other notifications.  If this property
            is not provided by the client, the default value shall be an array that
            contains the value `Redfish`.  The service may add additional values when
            this property is set or updated if allowed by the value of the `StrictAccountTypes`
            property.
          x-versionAdded: v1_4_0
        Actions:
          $ref: '#/components/schemas/ManagerAccount_v1_9_5_Actions'
          description: The available actions for this resource.
          x-longDescription: This property shall contain the available actions for
            this resource.
          x-versionAdded: v1_1_0
        Certificates:
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_idRef
          description: The link to a collection of user identity certificates for
            this account.
          readOnly: true
          x-longDescription: This property shall contain a link to a resource collection
            of type `CertificateCollection` that represents the user identity certificates
            for this account.
          x-versionAdded: v1_2_0
        Description:
          oneOf:
          - $ref: http://redfish.dmtf.org/schemas/v1/Resource.yaml#/components/schemas/Resource_Description
          - enum:
            - null
          readOnly: true
        Enabled:
          description: An indication of whether an account is enabled.  An administrator
            can disable it without deleting the user information.  If `true`, the
            account is enabled and the user can log in.  If `false`, the account is
            disabled and, in the future, the user cannot log in.
          readOnly: false
          type: boolean
          x-longDescription: This property shall indicate whether an account is enabled.  If
            `true`, the account is enabled and the user can log in.  If `false`, the
            account is disabled and, in the future, the user cannot log in.
        HostBootstrapAccount:
          description: An indication of whether this account is a bootstrap account
            for the host interface.
          readOnly: true
          type: boolean
          x-longDescription: This property shall indicate whether this account is
            a bootstrap account created by the Redfish Host Interface Specification-defined
            credential bootstrapping.
          x-versionAdded: v1_8_0
        Id:
          $ref: http://redfish.dmtf.org/schemas/v1/Resource.yaml#/components/schemas/Resource_Id
          readOnly: true
        Keys:
          $ref: http://redfish.dmtf.org/schemas/v1/odata-v4.yaml#/components/schemas/odata-v4_idRef
          description: The link to the collection of keys that can be used to authenticate
            this account.  For example, an SSH public key could be added to this collection
            to allow for SSH public key authentication.
          readOnly: true
          x-longDescription: This property shall contain a link to a resource collection
            of type `KeyCollection` that contains the keys that can be used to authenticate
            this account.
          x-versionAdded: v1_9_0
        Links:
          $ref: '#/components/schemas/ManagerAccount_v1_9_5_Links'
          description: The links to other resources that are related to this resource.
          x-longDescription: This property shall contain links to resources that are
            related to but are not contained by, or subordinate to, this resource.
        Locked:
          description: An indication of whether the account service automatically
            locked the account because the lockout threshold was exceeded.  To manually
            unlock the account before the lockout duration period, an administrator
            can change the property to `false` to clear the lockout condition.
          readOnly: false
          type: boolean
          x-longDescription: This property shall indicate whether the account service
            automatically locked the account because the `AccountLockoutThreshold`
            was exceeded.  To manually unlock the account before the lockout duration
            period, an administrator shall be able to change the property to `false`
            to clear the lockout condition.
        Name:
          $ref: http://redfish.dmtf.org/schemas/v1/Resource.yaml#/components/schemas/Resource_Name
          readOnly: true
        OEMAccountTypes:
          description: The OEM account types.
          items:
            nullable: true
            type: string
          readOnly: false
          type: array
          x-longDescription: This property shall contain an array of the OEM account
            types for this account.  This property shall be valid when `AccountTypes`
            contains `OEM`.
          x-versionAdded: v1_4_0
        Oem:
          $ref: http://redfish.dmtf.org/schemas/v1/Resource.yaml#/components/schemas/Resource_Oem
          description: The OEM extension property.
          x-longDescription: This property shall contain the OEM extensions.  All
            values for properties that this object contains shall conform to the Redfish
            Specification-described requirements.
        Password:
          description: The password.  Use this property with a `PATCH` or `PUT` to
            write the password for the account.  This property is `null` in responses.
          nullable: true
          readOnly: false
          type: string
          writeOnly: true
          x-longDescription: This property shall contain the password for this account.  The
            value shall be `null` in responses.
        PasswordChangeRequired:
          description: An indication of whether the service requires that the password
            for this account be changed before further access to the account is allowed.
          nullable: true
          readOnly: false
          type: boolean
          x-longDescription: This property shall indicate whether the service requires
            that the password for this account be changed before further access to
            the account is allowed.  The implementation may deny access to the service
            if the password has not been changed.  A manager account created with
            an initial `PasswordChangeRequired` value of `true` may force a password
            change before first access of the account.  When the `Password` property
            for this account is updated, the service shall set this property to `false`.
          x-versionAdded: v1_3_0
        PasswordExpiration:
          description: Indicates the date and time when this account password expires.  If
            `null`, the account password never expires.
          format: date-time
          nullable: true
          readOnly: false
          type: string
          x-longDescription: This property shall contain the date and time when this
            account password expires.  If the value is `null`, the account password
            never expires.  If provided during account creation or password modification,
            and allowed by the service, this value shall override the value of the
            `PasswordExpirationDays` property in the `AccountService` resource.
          x-versionAdded: v1_6_0
        RoleId:
          description: The role for this account.
          readOnly: false
          type: string
          x-longDescription: This property shall contain the `RoleId` of the role
            resource configured for this account.  The service shall reject `POST`,
            `PATCH`, or `PUT` operations that provide a `RoleId` that does not exist
            by returning the HTTP `400 Bad Request` status code.
        SNMP:
          description: The SNMP settings for this account.
          oneOf:
          - $ref: '#/components/schemas/ManagerAccount_v1_9_5_SNMPUserInfo'
          - enum:
            - null
          x-longDescription: This property shall contain the SNMP settings for this
            account when `AccountTypes` contains `SNMP`.
          x-versionAdded: v1_4_0
        StrictAccountTypes:
          description: Indicates if the service needs to use the account types exactly
            as specified when the account is created or updated.
          nullable: true
          readOnly: false
          type: boolean
          x-longDescription: This property shall indicate if the service needs to
            use the value of `AccountTypes` and `OEMAccountTypes` values exactly as
            specified.  A `true` value shall indicate the service needs to either
            accept the value without changes or reject the request.  A `false` value
            shall indicate the service may add additional `AccountTypes` and `OEMAccountTypes`
            values as needed to support limitations it has in separately controlling
            access to individual services.  If this property is not present, the value
            shall be assumed to be `false`.  An update of the service can cause account
            types to be added to or removed from the `AccountTypes` and `OEMAccountTypes`
            properties, regardless of the value of this property.  After a service
            update, clients should inspect all accounts where the value of this property
            is `true` and perform maintenance as needed.
          x-versionAdded: v1_7_0
        UserName:
          description: The username for the account.
          readOnly: false
          type: string
          x-longDescription: This property shall contain the username for this account.
      required:
      - '@odata.id'
      - '@odata.type'
      - Id
      - Name
      - AccountTypes
      type: object
      x-longDescription: This resource shall represent a user account for the manager
        in a Redfish implementation.  The account shall indicate the allowed access
        to one of more services in the manager.
      x-patternProperties:
        ^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\.[a-zA-Z_][a-zA-Z0-9_]*$:
          description: This property shall specify a valid odata or Redfish property.
      x-requiredOnCreate:
      - Password
      - UserName
      - RoleId
    ManagerAccount_v1_9_5_OemActions:
      additionalProperties: true
      description: The available OEM-specific actions for this resource.
      properties: {}
      type: object
      x-longDescription: This type shall contain the available OEM-specific actions
        for this resource.
      x-patternProperties:
        ^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\.[a-zA-Z_][a-zA-Z0-9_]*$:
          description: This property shall specify a valid odata or Redfish property.
    ManagerAccount_v1_9_5_SNMPAuthenticationProtocols:
      enum:
      - None
      - HMAC_MD5
      - HMAC_SHA96
      - HMAC128_SHA224
      - HMAC192_SHA256
      - HMAC256_SHA384
      - HMAC384_SHA512
      type: string
      x-enumDescriptions:
        HMAC128_SHA224: HMAC-128-SHA-224 authentication.
        HMAC192_SHA256: HMAC-192-SHA-256 authentication.
        HMAC256_SHA384: HMAC-256-SHA-384 authentication.
        HMAC384_SHA512: HMAC-384-SHA-512 authentication.
        HMAC_MD5: HMAC-MD5-96 authentication.
        HMAC_SHA96: HMAC-SHA-96 authentication.
        None: No authentication.
      x-enumLongDescriptions:
        HMAC128_SHA224: This value shall indicate authentication for SNMPv3 access
          conforms to the RFC7860-defined usmHMAC128SHA224AuthProtocol.
        HMAC192_SHA256: This value shall indicate authentication for SNMPv3 access
          conforms to the RFC7860-defined usmHMAC192SHA256AuthProtocol.
        HMAC256_SHA384: This value shall indicate authentication for SNMPv3 access
          conforms to the RFC7860-defined usmHMAC256SHA384AuthProtocol.
        HMAC384_SHA512: This value shall indicate authentication for SNMPv3 access
          conforms to the RFC7860-defined usmHMAC384SHA512AuthProtocol.
        HMAC_MD5: This value shall indicate authentication conforms to the RFC3414-defined
          HMAC-MD5-96 authentication protocol.
        HMAC_SHA96: This value shall indicate authentication conforms to the RFC3414-defined
          HMAC-SHA-96 authentication protocol.
        None: This value shall indicate authentication is not required.
      x-enumVersionAdded:
        HMAC128_SHA224: v1_7_0
        HMAC192_SHA256: v1_7_0
        HMAC256_SHA384: v1_7_0
        HMAC384_SHA512: v1_7_0
    ManagerAccount_v1_9_5_SNMPEncryptionProtocols:
      enum:
      - None
      - CBC_DES
      - CFB128_AES128
      type: string
      x-enumDescriptions:
        CBC_DES: CBC-DES encryption.
        CFB128_AES128: CFB128-AES-128 encryption.
        None: No encryption.
      x-enumLongDescriptions:
        CBC_DES: This value shall indicate encryption conforms to the RFC3414-defined
          CBC-DES encryption protocol.
        CFB128_AES128: This value shall indicate encryption conforms to the RFC3826-defined
          CFB128-AES-128 encryption protocol.
        None: This value shall indicate there is no encryption.
    ManagerAccount_v1_9_5_SNMPUserInfo:
      additionalProperties: false
      description: The SNMP settings for an account.
      properties:
        AuthenticationKey:
          description: The secret authentication key for SNMPv3.
          nullable: true
          pattern: (^[ -~]+$)|(^Passphrase:[ -~]+$)|(^Hex:[0-9A-Fa-f]{24,96})|(^\*+$)
          readOnly: false
          type: string
          writeOnly: true
          x-longDescription: This property shall contain the key for SNMPv3 authentication.  The
            value shall be `null` in responses.  This property accepts a passphrase
            or a hex-encoded key.  If the string starts with `Passphrase:`, the remainder
            of the string shall be the passphrase and shall be converted to the key
            as described in the 'Password to Key Algorithm' section of RFC3414.  If
            the string starts with `Hex:`, then the remainder of the string shall
            be the key encoded in hexadecimal notation.  If the string starts with
            neither, the full string shall be a passphrase and shall be converted
            to the key as described in the 'Password to Key Algorithm' section of
            RFC3414.
          x-versionAdded: v1_4_0
        AuthenticationKeySet:
          description: Indicates if the `AuthenticationKey` property is set.
          readOnly: true
          type: boolean
          x-longDescription: This property shall contain `true` if a valid value was
            provided for the `AuthenticationKey` property.  Otherwise, the property
            shall contain `false`.
          x-versionAdded: v1_5_0
        AuthenticationProtocol:
          description: The authentication protocol for SNMPv3.
          oneOf:
          - $ref: '#/components/schemas/ManagerAccount_v1_9_5_SNMPAuthenticationProtocols'
          - enum:
            - null
          readOnly: false
          x-longDescription: This property shall contain the SNMPv3 authentication
            protocol.
          x-versionAdded: v1_4_0
        EncryptionKey:
          description: The secret encryption key used in SNMPv3.
          nullable: true
          pattern: (^[ -~]+$)|(^Passphrase:[ -~]+$)|(^Hex:[0-9A-Fa-f]{16,64}$)|(^\*+$)
          readOnly: false
          type: string
          writeOnly: true
          x-longDescription: This property shall contain the key for SNMPv3 encryption.  The
            value shall be `null` in responses.  This property accepts a passphrase
            or a hex-encoded key.  If the string starts with `Passphrase:`, the remainder
            of the string shall be the passphrase and shall be converted to the key
            as described in the 'Password to Key Algorithm' section of RFC3414.  If
            the string starts with `Hex:`, then the remainder of the string shall
            be the key encoded in hexadecimal notation.  If the string starts with
            neither, the full string shall be a passphrase and shall be converted
            to the key as described in the 'Password to Key Algorithm' section of
            RFC3414.
          x-versionAdded: v1_4_0
        EncryptionKeySet:
          description: Indicates if the `EncryptionKey` property is set.
          readOnly: true
          type: boolean
          x-longDescription: This property shall contain `true` if a valid value was
            provided for the `EncryptionKey` property.  Otherwise, the property shall
            contain `false`.
          x-versionAdded: v1_5_0
        EncryptionProtocol:
          description: The encryption protocol for SNMPv3.
          oneOf:
          - $ref: '#/components/schemas/ManagerAccount_v1_9_5_SNMPEncryptionProtocols'
          - enum:
            - null
          readOnly: false
          x-longDescription: This property shall contain the SNMPv3 encryption protocol.
          x-versionAdded: v1_4_0
      type: object
      x-longDescription: This object shall contain the SNMP settings for an account.
      x-patternProperties:
        ^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\.[a-zA-Z_][a-zA-Z0-9_]*$:
          description: This property shall specify a valid odata or Redfish property.
title: '#ManagerAccount.v1_9_5.ManagerAccount'
x-copyright: Copyright 2014-2025 DMTF. For the full DMTF copyright policy, see http://www.dmtf.org/about/policies/copyright
x-language: en
x-owningEntity: DMTF
x-release: '2022.1'
