Statistics Store Authorizations and Administrative Profiles

By default, any user can read and record any data in the statistics store. Some other operations, such as reading sensitive data, require additional authorization. The following authorizations are available for operations on the statistics store. See the sstore-security(7) and sstore-authorized-user(7) man pages for more information. The root user or role has all solaris authorizations. See Securing Users and Processes in Oracle Solaris 11.4 for more information about authorizations, roles, and rights profiles.

Table B-1 Statistics Store Operation Authorizations

Authorization	Authorized Operation
solaris.sstore.read.sensitive	Read a sensitive statistic or event.
solaris.sstore.capture.sensitive	Record a sensitive statistic or event.
solaris.sstore.capture.expensive	Record an expensive statistic or event.
solaris.sstore.update.res	Add a resource to a class or remove a resource from a class.
solaris.sstore.write	Provide statistic or event data.
solaris.sstore.delete	Purge statistic or event data.
solaris.sstore.configure	Update a collection created by another user.
solaris.smf.manage.sstore	Manage statistics store states.
solaris.smf.value.sstore	Change values of statistics store properties.

The following Oracle Solaris administrative profiles are available for operations on the statistics store. The System Administrator profile includes the Stat Store Management profile. The System Observability profile includes the Stat Store Read All profile.

Table B-2 Oracle Solaris Statistics Store Administrative Profiles

Administrative Profile	Authorizations
Stat Store Management	solaris.smf.manage.sstore, solaris.smf.value.sstore, solaris.sstore.*
Stat Store Read All	solaris.sstore.read.sensitive, solaris.sstore.capture.sensitive, solaris.sstore.capture.expensive