Checking rights and roles with the dzinfo program
You can also view rights and roles for specific users or the current user by running the dzinfo command-line program on Centrify‑managed computers. If you want to use the dzinfo program to view roles and rights for other users, however, you must have root permission.
You can run dzinfo without any arguments to see your own rights and role assignments. The command displays detailed information about the your role assignments, the availability for each role assignments, your effective rights, the current audit level, and the specific PAM access, command, and secure shell rights you have been granted.
To see more detailed information, such as the days and times a role is available, you can use the --verbose option. For example, to see detailed information, you could type the following command:
To view roles and rights for a specific user:
- Log on or switch to root on a managed computer.
Run the dzinfo command for a specific user with the username in the command line.
For example, to see details about the rights and roles assigned to the user sonya, you could type the following command:
If rights and role assignments have been configured for the specified user, the command displays detailed information about the user’s role assignments, the availability of those role assignments, the user’s effective rights, the audit level in effect, and the specific rights that have been granted.
You can also use the dzinfo program to test whether a user has the right to run specific commands. For more information about using dzinfo and the dzinfo command line options, see the dzinfo man page.