Purpose of Role-Based Access Control

In the past, Unix and Solaris system administration has been performed using the root superuser account or a user account that's granted superuser privileges. Even if access to only a few privileged operations or commands were needed to perform a task, the user account was granted complete control over the system. This all-or-nothing approach to system administration has always been a security issue. Role-Based Access Control (RBAC) addresses this issue.

The RBAC subsystem supports the concept of a special type of user account called a role. Roles are granted a set of superuser privileges to perform some administrative tasks, such as printer management. Even though roles are a type of user account, they can ...

Get Solaris™ 9 System Administrator Exam Cram™ 2 (Exams 310-014 and 310-015) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.