Explanation/Reference:
Note:
* A user can only assume roles that are assigned to the user's login account.
* After you have set up roles with default Solaris rights profiles, and assigned the roles to users, the roles can be used. A role can be assumed on the command line. In the Solaris Management Console, a role can also be used for administering the system locally and over the network.
* How to Assume a Role in a Terminal Window
The role must already be assigned to you. The name service must be updated with that information.
1. In a terminal window, determine which roles you can assume.
2 . % roles
Comma-separated list of role names is displayed
3. Use the su command to assume a role.
. % su - rolename
4
5 . Password: <Type rolename password>
$
The su -rolename command changes the shell to a profile shell for the role. A profile shell recognizes security attributes (authorizations, privileges, and set ID bits).
6. Verify that you are now in a role.
7 . $ /usr/ucb/whoami
rolename
You can now perform role tasks in this terminal window.