Creating a new role and assigning capabilities to roles

You can create a new role and grant desired capabilities to the role.

Steps

1. Enter the following command: useradmin role add role_name [-c comments] -a capability1[,capability2...]

   role_name is the name of the role you want to create. Role names are case insensitive and can be 1-32 characters.

   comments is a short string you can use to document this role.

   The capability parameters are the types of access you want to grant to this new role.

   Example

   You can also grant API capabilities for API command families. For example, to grant the myrole role only the capability to run CIFS commands, you use the following command:useradmin role add myrole -a api-cifs-*

2. To verify the success of the operation, enter the following command: useradmin role list role_name

   The capabilities allowed for the specified role are listed.