Using f5insight-auth-mode to change the login mode¶

Use the f5insight-auth-mode command-line utility to switch F5 Insight between System and Local login modes for the UI (does not impact external authentication or machine-user API access). The utility is available from the system CLI so you can change the mode during emergency access or password recovery.

Login modes¶

The UI uses either System mode or Local mode for human login.

system: Use the single admin account and its system password to log in to the UI. You can also use this account through SSH or the serial console.
local: Use local user accounts stored in the F5 Insight database to log in to the UI.

For UI access, use Local mode and assign users application-level roles. This limits routine UI access through the System admin account, which has root-level privileges. For details, see System authentication.

Use Local authentication when you manage Insight users and machine users in the product. For details, see Local authentication and role-based access control.

Commands¶

Show the mode currently configured in the Helm release:

sudo f5insight-auth-mode show

Set the login mode by providing system or local:

sudo f5insight-auth-mode set local

The command prompts for confirmation before applying the change. Add --yes to skip the confirmation prompt. After changing the mode, allow the backend deployment to restart before verifying login behavior.

Options¶

The following options are available with set:

--dry-run: Run the Helm upgrade with --dry-run. The command skips patching the live deployment.
--yes: Skip the confirmation prompt.

Examples¶

sudo f5insight-auth-mode show
sudo f5insight-auth-mode set system
sudo f5insight-auth-mode set local

Previous Next