How to Modify a User's RBAC Properties From the Command Line

Steps

1. Become superuser or assume a role that can modify user files.

2. Use the appropriate command:

   • To change the authorizations, roles, or rights profiles that are assigned to a user who is defined in the local scope, use the usermod(1M) command.

   • Alternatively, to change the authorizations, roles, or rights profiles that are assigned to a user who is defined in the local scope, edit the user_attr file.

     This method is recommended for emergencies only, as it is easy to make a mistake while you are typing.

   • To change the authorizations, roles, or rights profiles that are assigned to a user who is defined in a name service, use the smuser(1M) command.

     This command requires authentication as superuser or as a role that is capable of changing user files. You can apply smuser to all name services. smuser runs as a client of the Solaris Management Console server.