create_role

Use the create_role command to create a new role definition in the currently selected zone.

Syntax

create_role name description sysrights pamrights cmdrights allowlocal rsenv visible

Options

This command takes no options.

Arguments

This command takes the following arguments:

Argument	Type	Description
name	string	Required. Specifies the name to assign to the new role.
description	string	Specifies the text string that describes the role.
sysrights	integer	Specifies the system rights granted to the role. This value is an integer that represents a combination of binary flags, one for each system right. This field is not applicable in classic zones.
pamrights[/zonename]	string	Specifies the PAM application rights to add to the currently selected role. If the PAM application right that you want to add is defined in the current zone, the `zonename` argument is optional. If the PAM application right is defined in a zone other than the currently selected zone, the `zonename` argument is required to identify the specific PAM application right to add.
cmdrights[/zonename]	string	Specifies the UNIX command rights to add to the currently selected role. If the UNIX command right that you want to add is defined in the current zone, the `zonename` argument is optional. If the UNIX command right is defined in a zone other than the currently selected zone, the `zonename` argument is required to identify the specific UNIX command right to add.
allowlocal	Boolean	Specifies whether local users can be assigned to the role. If this argument is specified, local users can be assigned to the role. This argument is only applicable if the zone is a hierarchical zone.
rsenv	string	Specifies a restricted shell environment for the role you are creating. This argument is only applicable if the zone is a classic zone.
visible	Boolean	Specifies whether the account profiles for Active Directory users in the role are visible on computers in the zone. This argument is only applicable if the zone is a hierarchical zone.

Return value

This command returns nothing if it runs successfully.

Examples

create_role dba {Database admins - US} 11 {{oracle} {ftp}} {{testvi} {ora-stp}}

Related Tcl library commands

None.