System Administration Guide: IP Services

Setting Up User Access to DHCP Commands

To allow users other than root to execute dhcpconfig, dhtadm, and pntadm commands without first becoming superuser, you must set up role-based access control (RBAC) for those commands. RBAC enables you to more precisely define which users can perform which tasks on the system. See rbac(5), exec_attr(4), and user_attr(4) man pages for more information.

The following procedure explains how to assign a user the DHCP Management profile, which enables the user to execute the DHCP commands.

How to Grant Users Access to DHCP Commands

  1. Become superuser on the DHCP server system.

  2. Edit the file /etc/user_attr to add an entry of the following form for each user you want to be able to manage the DHCP service:


    username::::type=normal;profiles=DHCP Management

    For example, for user ram, add the following entry:

    ram::::type=normal;profiles=DHCP Management