The usermod command is used to change the definition of a user's login and make appropriate login-related file system changes for the user.
For example, to add a role to a user, you would type:
# usermod -R role username
See the usermod(8) man page for details about the arguments and options that you can specify with the usermod command.
This example shows how to modify a user to set PAM policy. This particular modification specifies that user jdoe should only be authenticated with the Kerberos V5 protocol for all PAM services. For more information, see the pam_user_policy(7) man page.
# usermod -K pam_policy=krb5_only jdoe
For additional information, see Creating a Role in Securing Users and Processes in Oracle Solaris 11.4.