Oracle Exam 1Z0-580 Topic 6 Question 17 Discussion

Note:

* A user can only assume roles that are assigned to the user's login account.

* After you have set up roles with default Solaris rights profiles, and assigned the roles to users, the roles can be used. A role can be assumed on the command line. In the Solaris Management Console, a role can also be used for administering the system locally and over the network.

* How to Assume a Role in a Terminal Window

The role must already be assigned to you. The name service must be updated with that information.

1. In a terminal window, determine which roles you can assume.

2. % roles

Comma-separated list of role names is displayed

3. Use the su command to assume a role.

4. % su - rolename

5. Password: <Type rolename password>

$

The su - rolename command changes the shell to a profile shell for the role. A profile shell recognizes security attributes (authorizations, privileges, and set ID bits).

6. Verify that you are now in a role.

7. $ /usr/ucb/whoami

rolename

You can now perform role tasks in this terminal window.