Modifying a User's RBAC Properties

You can modify a user's RBAC properties by using either the user accounts tool or the command line. To modify a user's RBAC properties, see How to Modify a User's RBAC Properties From the Command Line.

How to Modify a User's RBAC Properties From the Command Line

1. Assume a role that provides solaris.cluster.modify RBAC authorization.
2. Choose the appropriate command:

   • To change user properties that are assigned to a user who is defined in the local scope or in an LDAP repository, use the usermod command. For more information, see the usermod(1M) man page.

   • Alternatively, to change the authorizations, roles, or rights profiles that are assigned to a user who is defined in the local scope, edit the user_attr file.

     Use this method for emergencies only.

   • To manage roles locally or in a name service such as an LDAP repository, use the roleadd or rolemod commands. For more information, see the roleadd(1M) or rolemod(1M) man pages.

     These commands require authentication as the root role that is capable of changing user files. You can apply these commands to all name services. See Commands That Are Used for Managing Users, Roles, and Groups in Managing User Accounts and User Environments in Oracle Solaris 11.1.

   The Forced Privilege and Stop Rights profiles that ship with Oracle Solaris 11 cannot be modified.