To Set a User's Role (Restricted Mode)

This task is based on the restricted mode configuration of the N1 System Manager, where the management server has access only to either the provisioning network or to the management network, but not to both networks.

Users are automatically logged in to the N1 System Manager with their assigned user default role. The user default role can be a custom role that has been assigned as a default role to the user, and does not have to be a system default role. System default roles are shown in Table 2–3.

Steps

1. Log in to the N1 System Manager.

   See To Access the N1 System Manager Command Line for details.

2. Show which roles are added to the user.

   N1-ok> show user user

   You must have the SecurityAdmin role's privileges to run this command. See show user in Sun N1 System Manager 1.3 Command Line Reference Manual for details.

3. Set a user's restricted mode role.

   N1-ok> set user user defaultrole defaultrole

   See set user in Sun N1 System Manager 1.3 Command Line Reference Manual for details.

   • For the restricted mode in which the N1 System Manager has access only to the management network, use the following command:

     N1-ok> set user user defaultrole MgmtAdmin

   • For the restricted mode in which the N1 System Manager has access only to the provisioning network, use the following command:

     N1-ok> set user user defaultrole ProvAdmin

   See Table 2–4 for details about privileges associated with these roles.

   It is possible to delete or modify the ProvAdmin and MgmtAdmin restricted mode roles, but care should be taken that custom roles contain the correct privilege set for N1 System Manager to operate in restricted mode, for system stability. See Restricted Mode Capabilities for details.