Solaris

Hi,

how to assign the rights(admin,..) to groups .
I can create group using groupadd.
but i don't know how to assign rights and adding members
please tell me how to do that

Thank you

you can add users to group with the help of usermod command

usermod -g( in case if u want to assign the primary group or -G in case the of secondary group ) followed by group name or gid then user name .

i.e

usermod -g <primary group name / gid> -G < secondary group name / gid> <username>

check the detail with

groups <username>

Dears.

To assign the rights to specific User In Solaris

Role-based access control (RBAC) is an alternative to the all-or-nothing superuser model. RBAC uses the security principle of least privilege. No user should be given more privilege than necessary for performing the user's job. RBAC makes it possible for an organization to separate superusers' capabilities and assign these capabilities to specific users or to special user accounts that are called roles. Roles can be assigned to specific individuals, according to their job needs

you have already user in your system named dell
you want to assign some administration tasks to del to do

1) you must make profile in this example the profile named is useradmin
# vi /etc/security/prof_attr
then you will write at the end of the file

useradmin::::
==========================================================
then at this file /etc/security/exec_attr you will assign the command what you want this user (dell) to do

/etc/security/exec_attr

useracc:suser:cmd:::/usr/sbin/useradd:uid=0
useracc:suser:cmd:::/usr/sbin/userdel:uid=0
useracc:suser:cmd:::/usr/sbin/usermod:uid=0
useracc:suser:cmd:::/usr/sbin/groupadd:uid=0
useracc:suser:cmd:::/usr/sbin/groupdel:uid=0
useracc:suser:cmd:::/usr/sbin/groupmod:uid=0
==========================================================
when you add role it's like useradd you will found the role name at /etc/passwd


Create role:-
**************
# roleadd -c "User Administration" -g "Primary Group" -md /export/home/username -s /user/bin/pfksh -P "useracc" username

-c if you want to add comment
-g if you want to add this role to primary group
-md to create the home directory for the role (it's like useradd home directory for the user)
-s to assign shell for user (this is like ksh we use but it is special for this command becouse it is check the rights you given to the user)
-P capital P to assign the profile


# passwd username
# usermod -R username dell
-R to assign role to existing user