How to Modify a User's Label Range in the Solaris Management Console

You might want to extend a user's label range to give the user read access to an administrative application. For example, a user who can log in to the global zone could then run the Solaris Management Console. The user could view, but not not change the contents.

Alternatively, you might want to restrict the user's label range. For example, a guest user might be limited to one label.

Before You Begin

You must be in the Security Administrator role in the global zone.

1. Open a Trusted Extensions toolbox in the Solaris Management Console.

   Use a toolbox of the appropriate scope. For details, see Initialize the Solaris Management Console Server in Trusted Extensions in Oracle Solaris Trusted Extensions Configuration Guide.

2. Under System Configuration, navigate to User Accounts.

   A password prompt might be displayed.

3. Type the role password.

4. Select the individual user from User Accounts.

5. Click the Trusted Extensions Attributes tab.

   

   • To extend the user's label range, choose a higher clearance.

     You can also lower the minimum label.

   • To restrict the label range to one label, make the clearance equal to the minimum label.

6. To save the changes, click OK.