User Management
Bash
sudo useradd -m -s /bin/bash deploy
sudo useradd -m -s /bin/bash -G docker,sudo deploy
sudo passwd deploy
sudo usermod -s /bin/zsh deploy
sudo usermod -aG docker deploy
sudo usermod -L deploy # lock the account
sudo usermod -U deploy # unlock the account
sudo userdel deploy
sudo userdel -r deploy # also delete home directory and mail spoolGroup Management
Bash
sudo groupadd devteam
sudo groupdel devteam
sudo gpasswd -a deploy devteam
sudo gpasswd -d deploy devteam
id
groups deploy
getent group dockerAccount Expiration
Bash
sudo chage -l deploy
sudo chage -M 90 deploy # force a password change every 90 days
sudo chage -E 2026-12-31 deploy # account expiration datesudo Privileges
Bash
sudo usermod -aG sudo deploy
# edit with visudo
deploy ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart nginx, /usr/bin/docker *
%devteam ALL=(ALL) NOPASSWD: /usr/bin/dockerDedicated Service Accounts (Recommended for Security)
Bash
sudo useradd \
--system \
--no-create-home \
--shell /sbin/nologin \
--comment "App Service Account" \
myappLogin Activity
Bash
who
w
last
lastb # failed login attemptsEditorial note
AI tools may assist drafting. Check the evidence in each guide for whether commands were run and which environment was used. Confirm the current docs for your version before applying instructions, and email us about errors. email us
Questions & answers
Ask a question about this guide. We'll review and reply.