Modifying a User's Rights

Language:

Note - The rights profiles for Oracle Solaris Cluster software, including the disaster recovery framework framework,are intended to simplify the assignment of management roles and protect against accidental errors. However, a malicious user would be able to abuse rights-based cluster administration privileges to gain wider system privileges. Therefore, user rights should be assigned with care.

When you grant authorization to users other than the root role, you must do so on all nodes of both partner clusters. If the cluster is in a site, the update must be done on all nodes of all clusters in the site. Otherwise, operations that have a global scope might fail, due to insufficient user rights on one or more nodes in the partnership or site.

To modify the rights for a user, you must be logged in as the root role or assume a role that is assigned the System Administrator rights profile.

For example, you can assign the Geo Management rights profile to the user admin as follows:

# usermod -P "Geo Management" admin
# profiles admin
Geo Management
Basic Solaris User
#

For more information about how to modify the rights properties for a user, refer to Chapter 2, Oracle Solaris Cluster and User Rights in Administering an Oracle Solaris Cluster 4.4 Configuration.