Skip Navigation Links
Exit Print View
| Oracle Solaris Cluster System Administration Guide Oracle Solaris Cluster 4.1

Search Scope:

- This Document
- Entire Library

## Modifying a User's RBAC Properties

You can modify a user's RBAC properties by using either the user accounts tool or the command line. To modify a user's RBAC properties, see How to Modify a User's RBAC Properties From the Command Line.

## How to Modify a User's RBAC Properties From the Command Line

1. Assume a role that provides `solaris.cluster.modify` RBAC authorization.
2. Choose the appropriate command:

   - To change user properties that are assigned to a user who is defined in the local scope or in an LDAP repository, use the `usermod` command. For more information, see the `usermod`(1M) man page.

   - Alternatively, to change the authorizations, roles, or rights profiles that are assigned to a user who is defined in the local scope, edit the `user_attr` file.

     Use this method for emergencies only.

   - To manage roles locally or in a name service such as an LDAP repository, use the `roleadd` or `rolemod` commands. For more information, see the `roleadd`(1M) or `rolemod`(1M) man pages.

     These commands require authentication as the `root` role that is capable of changing user files. You can apply these commands to all name services. See Commands That Are Used for Managing Users, Roles, and Groups in Managing User Accounts and User Environments in Oracle Solaris 11.1.

   The Forced Privilege and Stop Rights profiles that ship with Oracle Solaris 11 cannot be modified.

Copyright © 2000, 2012, Oracle and/or its affiliates. All rights reserved. Legal Notices |