Working With DHCP in Oracle^® Solaris 11.3

How to Grant User Access to DHCP Commands

By default, only the root user can execute svcadm and other commands that are required to configure the DHCP service. If you want users who do not have root privileges to use the DHCP commands, you can set up role-based access control (RBAC) to allow access to those commands. The following procedure explains how to assign the DHCP Management profile, which enables the user to execute the DHCP commands.

You might also find the following man pages helpful: rbac(5), exec_attr(4), and user_attr(4).

1. Assume an appropriate role.

   Assume a role that can grant the DHCP Management profile to users. If the DHCP Management profile has not been assigned to a user, assume the root role.

   Roles contain authorizations and privileged commands. For more information about roles, see Creating a Role in Securing Users and Processes in Oracle Solaris 11.3. For more information about the DHCP Management profile, see How to Grant User Access to DHCP Commands.

2. Grant the DHCP Management profile to a user.

   # usermod -P+"DHCP Management" username