Defines the owner of a resource and the access privileges granted to various operating system users and groups. The resource owner defines the operating system user of the owner and its privileges. You configure this optional attribute when you create a resource. If you do not configure this attribute, then the value is based on the identity of the process creating the resource. You can change the value of the attribute if such a change is allowed based on the existing privileges of the resource.
Note:
All operating system user names and user groups, including owner, pgrp, user, and group, must be registered on all servers in the cluster.
In the string:
owner: The operating system user that owns a resource and the user under which the action script or application-specific agent runs, followed by the privileges of the owner.
pgrp: The operating system group that is the primary group of the owner of a resource, followed by the privileges of members of the primary group.
other: Operating system users that are neither the owner nor member of the primary group
r: The read option, which gives the ability to only see a resource, its state, and configuration
w: The write option, which gives the ability to modify a resource's attributes and to delete the resource
x: The execute option, which gives the ability to start, stop, and relocate a resource
By default, the identity of the client that creates a resource is the owner. Also by default, root, and the user specified in owner have full privileges. You can grant required operating system users and operating system groups their privileges by adding the following lines to the ACL attribute:
user:user_name:rwx group:group_name:rwx
Usage Example
ACL=owner:user_1:rwx,pgrp:osdba:rwx,other::r-
In the preceding example, the owner of the resource is user_1, whose primary group is osdba. The user, user_1, has all privileges, as does the osdba group, while other users can only view the resource.