Setting Up User Access to DHCP Commands

By default, only the root user can execute svcadm and other commands that are required to configure the DHCP service. If you want non root users to use the commands, you can set up role-based access control (RBAC) for those commands.

Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services.

You might also find the following man pages helpful: rbac(5), exec_attr(4), and user_attr(4).

The following procedure explains how to assign the DHCP Management profile, which enables the user to execute the DHCP commands.

How to Grant User Access to DHCP Commands

1. Become superuser or assume a role or user name that has been assigned to the DHCP Management profile.

   Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services.

2. Add a user or role to the /etc/user_attr file.

   Edit the /etc/user_attr file to add an entry of the following form. Add one entry for each user or role that should manage the DHCP service.

   username::::type=normal;profiles=DHCP Management

   For example, for user ram, you would add the following entry:

   ram::::type=normal;profiles=DHCP Management