Administrative Commands for Handling Privileges

The following table lists the commands that are available to handle privileges.

Table 12–1 Commands for Handling Privilege


Purpose	Command	Man Page
Examine process privileges	`ppriv -v` `pid`	ppriv(1)
Set process privileges	`ppriv -s` `spec`
List the privileges on the system	`ppriv -l`
List a privilege and its description	`ppriv -lv` `priv`
Debug privilege failure	`ppriv -eD` `failed-operation`
Assign privileges to a new local user	`useradd`	useradd(1M)
Add privileges to an existing local user	`usermod`	usermod(1M)
Assign privileges to a user in a name service	`smuser`	smuser(1M)
Assign privileges to a new local role	`roleadd`	roleadd(1M)
Add privileges to an existing local role	`rolemod`	rolemod(1M)
Assign privileges to a role in a name service	`smrole`	smrole(1M)
View device policy	`getdevpolicy`	getdevpolicy(1M)
Set device policy	`devfsadm`	devfsadm(1M)
Update device policy on open devices	`update_drv -p` `policy driver`	update_drv(1M)
Add device policy to a device	`add_drv -p` `policy driver`	add_drv(1M)

The Solaris Management Console GUI is the preferred tool for assigning privileges to commands, users, and roles. For more information, see How to Assume a Role in the Solaris Management Console.