Working with privileged commands and PAM applications

With some limitations, you can use most of the ADEdit commands for working with rights, role definitions, and role assignments in classic zones in the same way you work with them in hierarchical zones. In a classic zone, however, you must explicitly enable authorization for the zone. Thereafter, defining rights and roles or making role assignments work the same in classic zones and hierarchical zones.

In most cases, any differences or limitations for classic zones involve options or arguments that are not supported or not applicable in classic zones. For example, fields such as allowLocalUser, alwaysPermitLogin, and auditLevel are not applicable in classic zones. You can use the set_role_field command to set other field values in a classic zone. Individual commands specify these types of limitations.