Role assignment object management commands

You can use the following role assignment object commands to create, select, save, and delete role assignment objects and manage role assignment properties in the currently selected zone.

Command Description

delete_role_assignment

Deletes the selected role assignment from Active Directory and from memory.

get_role_assignment_field

Returns the value for a specified field from the currently selected role assignment.

get_role_assignments

Returns a Tcl list of role assignments in the current zone.

list_role_assignments

Lists all role assignments along with object data for each role assignment in stdout.

new_role_assignment

Creates a new role assignment and stores it in memory as the currently selected role assignment.

save_role_assignment

Saves the selected role assignment with its current settings to Active Directory.

select_role_assignment

Retrieves a role assignment from Active Directory and stores it in memory as the selected role assignment.

set_role_assignment_field

Sets the value for a specified field in the currently selected role assignment.