Editing Authorizations for a Role (CLI)

A role is a collection of privileges that can be assigned to a user. Use the following procedure to edit authorizations for a role.

1. Go to configuration roles.
2. Type select followed by the role name.
3. Type authorizations.
4. Type create to add an authorization.
5. Type set scope= followed by the scope name. Use tab-completion to see the list.
6. Type show to see both available filters and authorizations.
7. Type set to set the desired authorizations to true, and set the filters (if available). Tab-completion helps show which filter settings are valid.
8. Type commit.

   The authorization has now been added.

Example 7  Adding the Authorization to Restart the HTTP Service

This example adds the authorization to restart the HTTP service. This example also shows the output of tab-completion, which lists valid input and is useful when determining the valid scopes and filter options.

hostname:configuration roles > select webadmin
hostname:configuration roles webadmin > authorizations
hostname:configuration roles webadmin authorizations > create
hostname:configuration roles webadmin auth (uncommitted) > set scope=tab 
ad           cluster      net          schema       update       
alert        hardware     replication  stat         user         
appliance    nas          role         svc          worksheet    
hostname:configuration roles webadmin auth (uncommitted) > set scope=svc
                         scope = svc
hostname:configuration roles webadmin auth (uncommitted) > show
Properties:
                         scope = svc
                       service = *
              allow_administer = false
               allow_configure = false
                 allow_restart = false

hostname:configuration roles webadmin auth (uncommitted) > set service=tab 
*               ftp             ipmp            nis             ssh
ad              http            iscsi           ntp             tags
smb            identity        ldap            routing         vscan
datalink:igb0   idmap           ndmp            scrk            
dns             interface:igb0  nfs             snmp            
hostname:configuration roles webadmin auth (uncommitted) > set service=http
                       service = http (uncommitted)
hostname:configuration roles webadmin auth (uncommitted) > set allow_restart=true
                 allow_restart = true (uncommitted)
hostname:configuration roles webadmin auth (uncommitted) > commit
hostname:configuration roles webadmin authorizations > list
NAME       OBJECT                               PERMISSIONS
auth-000   svc.http                             restart

Related Topics

• Understanding Users and Roles

• User Authorizations

• Managing User Properties