Using Unified Archives for System Recovery and Cloning in Oracle^® Solaris 11.3

How to Configure a Role to Manage Unified Archives

The following procedure shows how to add rights profiles into one profile that you can use to manage unified archives.

1. Assume the root role.

   In order to be able to configure a rights profile, you must assume the root role. For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.3.

2. Create a new rights profile.

   The following example adds existing rights profiles to a new profile.

   # profiles -p new-profile
   profiles:new-profile> set desc="description"
   profiles:new-profile> add profiles="Unified Archive Administration"
   profiles:new-profile> add profiles="User Management"
   profiles:new-profile> add profiles="Zone Security"
   profiles:new-profile> commit; end; exit
     

3. Create a role that uses the new rights profile.

   In this step we also set a password for the new role.

   # roleadd -c "comment" -m -K profiles"new-profile" new-role
   # passwd new-role
   Password: xxxxxxxx
   Confirm password: xxxxxxxx

4. Assign the new role to a user.

   # usermod -R +new-role user