Predefined Roles

By default, Trusted Solaris divides system responsibilities among four predefined roles: security administrator, system administrator, root, and system operator. The security administrator role is used for security issues, such as assigning sensitivity labels or auditing user activity. The system administrator role is used to perform standard system management tasks such as setting up the non-security-relevant portions of user accounts. The root role is used primarily for installing commercial software. The system operator role is used for system backups, printer administration, and mounting removable media. If your site uses the predefined administration roles, make sure you know who is performing each set of duties.

No role can configure its own features. For example, the system administrator role is used to set up a user's access to the security administrator role and the security administrator role is used to set a user's access to the system administrator role.