Managing User Profiles

The SUNWldm package adds two system-defined RBAC profiles in the /etc/security/prof_attr file for use in authorizing access to the Logical Domains Manager by non-superusers. The two LDoms-specific profiles are:

• LDoms Review:::Review LDoms configuration:auths=solaris.ldoms.read

• LDoms Management:::Manage LDoms domains:auths=solaris.ldoms.*

One of the preceding profiles can be assigned to a user account using the following procedure.

Add a Profile for a User

1. Add an administrative profile for a local user account; for example, LDoms Management.

   # usermod -P “LDoms Management” username

Delete All Profiles for a User

1. Delete all profiles for a local user account (the only possible option).

   # usermod -P `` username