Module for Solaris' Role-Based Access Control
Add authorization to user
username
authorization name
CLI Example:
salt '*' rbac.auth_add martine solaris.zone.manage
salt '*' rbac.auth_add martine solaris.zone.manage,solaris.mail.mailq
List authorization for user
username
merge results from auths command into data from user_attr
CLI Example:
salt '*' rbac.auth_get leo
List all available authorization
CLI Example:
salt '*' rbac.auth_list
Remove authorization from user
username
authorization name
CLI Example:
salt '*' rbac.auth_rm jorge solaris.zone.manage
salt '*' rbac.auth_rm jorge solaris.zone.manage,solaris.mail.mailq
Add profile to user
username
profile name
CLI Example:
salt '*' rbac.profile_add martine 'Primary Administrator'
salt '*' rbac.profile_add martine 'User Management,User Security'
List profiles for user
username
hide default profiles
CLI Example:
salt '*' rbac.profile_get leo
salt '*' rbac.profile_get leo default_hidden=False
List all available profiles
return only default profile
CLI Example:
salt '*' rbac.profile_list
Remove profile from user
username
profile name
CLI Example:
salt '*' rbac.profile_rm jorge 'Primary Administrator'
salt '*' rbac.profile_rm jorge 'User Management,User Security'
Add role to user
username
role name
CLI Example:
salt '*' rbac.role_add martine netcfg
salt '*' rbac.role_add martine netcfg,zfssnap
List roles for user
username
CLI Example:
salt '*' rbac.role_get leo
List all available roles
CLI Example:
salt '*' rbac.role_list
Remove role from user
username
role name
CLI Example:
salt '*' rbac.role_rm jorge netcfg
salt '*' rbac.role_rm jorge netcfg,zfssnap