System Administration Guide: Security Services

Administrative Commands for Handling Privileges

The following table lists the commands that are available to handle privileges.

Table 12–1 Commands for Handling Privilege


Purpose	Command	Man Page
Examine process privileges	`ppriv -v` `pid`	ppriv(1)
Set process privileges	`ppriv -s` `spec`
List the privileges on the system	`ppriv -l`
List a privilege and its description	`ppriv -lv` `priv`
Debug privilege failure	`ppriv -eD` `failed-operation`
Assign privileges to a new local user	`useradd`	useradd(1M)
Add privileges to an existing local user	`usermod`	usermod(1M)
Assign privileges to a user in a name service	`smuser`	smuser(1M)
Assign privileges to a new local role	`roleadd`	roleadd(1M)
Add privileges to an existing local role	`rolemod`	rolemod(1M)
Assign privileges to a role in a name service	`smrole`	smrole(1M)
View device policy	`getdevpolicy`	getdevpolicy(1M)
Set device policy	`devfsadm`	devfsadm(1M)
Update device policy on open devices	`update_drv -p` `policy driver`	update_drv(1M)
Add device policy to a device	`add_drv -p` `policy driver`	add_drv(1M)

The Solaris Management Console GUI is the preferred tool for assigning privileges to commands, users, and roles. For more information, see How to Assume a Role in the Solaris Management Console.