SanteDB Administration Console

The SanteDB iCDR administrative console is a client tool which allows system administrators to quickly manage their iCDR instances from a command line. This tool is useful when:

  • Internet connectivity is extremely limited and text interface is preferred

  • You need to save output/reports for administrative functions to files

  • You have not yet setup the web-based administrative portal

Starting the Console

You can launch the command line on the same machine as the iCDR service from the start menu or by typing the sdbac command in the command line. If you need to connect to a different server/realm the basic syntax is:

sdbac --realm=<server-ip-or-name> --port=<port> [--tls] 

The command line options for sdbac are listed below:






The server/realm to which you're connecting.



The application identifier if the default administrative console application

has not been enabled by the system administrator.



The application secret if the default has been changed by the administrator


The port to connect to the iCDR API on



If specified, instruct the console administrative application to connect

via TLS



The username to login with



The password to use for authentication



When present, output all server and client events with full stack traces



When specified route all traffic through a proxy



When specified, instructs the client to send client credentials via HTTP BASIC

rather than through the request body of the OAUTH request.

Getting Help

You can run the help command in order to get a list of commands which are available on the administrative console.

> help
aa.add              Add Assigning Authority application
aa.list             Query assigning authorties/identity domains     Download the applet
applet.list         Lists all applets installed on the server
application.add     Add security application
application.del     De-activates an application in the SanteDB instance    Displays detailed information about the application
application.list    List Security Applications
application.lock    Engages or disengages the application lock
application.undel   Re-activates an application in the SanteDB instance
cdr.query           Query data from CDR
clear               Clears the screen
device.add          Add security device
device.alter        Alter security device
device.del          De-activates a device in the SanteDB instance         Displays detailed information about the device
device.list         List Security Devices
device.lock         Engages or disengages the device lock
device.undel        Re-activates a device in the SanteDB instance
exit                Quits the administrative shell
help                Shows help             Lists the contents of the specified file
log.list            Lists the available log files
log.messages        Outputs the most recent log file
policy.assign       Assign security policies to objects
policy.list         List security policies
role.add            Adds a role to the current SanteDB instance           Displays detailed information about the role
role.list           List Security Roles
server.asm          Shows the server assembly information         Gets diagnostic information from the server     Shows the server service information
server.threads      Shows the server thread information
user.add            Adds a user to the SanteDB instance
user.del            De-activates a user to the SanteDB instance           Displays detailed information about the user
user.list           Lists users in the SanteDB instance
user.lock           Engages or disengages the user lock
user.password       Changes a users password
user.roles          Change roles for a user
user.undel          Re-activates a user to the SanteDB instance
ver                 Shows current Admin Console Version
whoami              Identifies the current authentication principal
        help cmd
For command specific help

If you require help for a specific command use the help command syntax, for example, to get help with user.list:

> help user.list
user.list parms - Lists users in the SanteDB instance
           + This command lists all users in the user database regardless of their status, or class. To filter use the filter parameters listed.
 -l                 Filter on locked status
 -a                 Show obsolete non-active status
 -h                 Filter on human class only
 -s                 Filter on system class only
 -u                 The username of the user


pageUser AdministrationpageGroup / Role AdministrationpagePolicy AdministrationpageDevice AdministrationpageApplication Administration

Last updated