You must reorder a user's rights profiles assignments when an unprivileged command is in effect for the user rather than its privileged version. For more information, see Order of Search for Assigned Rights.
Before You Begin
You must become an administrator who is assigned the User Security rights profile. For more information, see Using Your Assigned Administrative Rights.
The list displays in order.
$ profiles username | rolename
# usermod | rolemod -K profiles="list-of-profiles"
In this example, the administrator determines that a rights profile with privileged commands is listed after the All rights profile for the role devadmin.
# profiles devadmin Basic Solaris User All Device Management
Therefore, the devadmin role cannot run the device management commands with the role's assigned privileges.
The administrator reassigns the rights profiles to devadmin. In the new order of assignment, the device management commands run with their assigned privileges.
# rolemod -K profiles="Device Management,Basic Solaris User,All" # profiles devadmin Device Management Basic Solaris User All