How it works
Rights profiles
Solaris RBAC can assign commands and authorizations through profiles.
Process privileges
Privileges are more granular than an all-or-nothing superuser model.
Audit
Auditing needs both a policy and operational log review.
Worked examples
Each example explains the question it answers, a reproducible starting point, what to look for, and operational precautions.
1. Inspect current identity
Use this as a starting point for inspect current identity.
id
profiles
authsInterpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
2. Inspect user attributes
Use this as a starting point for inspect user attributes.
userattr type root
userattr profiles rootInterpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
3. Review audit configuration
Use this as a starting point for review audit configuration.
auditconfig -getpolicyInterpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
4. Inspect privilege set
Use this as a starting point for inspect privilege set.
ppriv $$Interpretation: Check command output against the expected host configuration; record the before/after state.
Operational note: Run commands in a test environment first; confirm device names, privileges and release-specific options.
Primary documentation
Read the relevant Oracle documentation for exact version-specific flags, supported platforms and limitations: Oracle primary reference ↗.
This field manual is independent, not affiliated with or endorsed by Oracle. Command examples should be adapted to your environment.