RBAC additionally provides commands that check authorizations. By definition, root has all authorizations and thus can run any application. Currently, the applications that check for authorizations include the following:
The entire Solaris Management Console suite of tools
The batch job-related commands – at, atq, batch, and crontab
Device-oriented commands – allocate, deallocate, list_devices, and cdrw.