This post is more than 5 years old

1 Rookie

 • 

16 Posts

9370

December 13th, 2013 15:00

What privledge does a custom RBAC role need to run isi_for_array?

In the example below I am logged in as a user that is a member of a group named SSH Access.  SSH Access is a member of custom role SSHAccess.  Sorry for the close naming convention.  I tried running with and without sudo and I am denied.

Isilon OneFS v7.1.0.0
Demo7-1-1% isi_for_array -s isi devices
zsh: permission denied: isi_for_array
Demo7-1-1% sudo isi_for_array -s sudo isi devices


We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

    #1) Respect the privacy of others.
    #2) Think before you type.
    #3) With great power comes great responsibility.

Password:
Sorry, user stati-user is not allowed to execute '/usr/bin/isi_for_array -s sudo isi devices' as root on Demo7-1-1.
Demo7-1-1% sudo isi_for_array sudo isi devices
Password:
Sorry, user stati-user is not allowed to execute '/usr/bin/isi_for_array sudo isi devices' as root on Demo7-1-1.



Privileges assigned to SSHAccess role

Demo7-1-1% isi auth roles view --role=SSHAccess
       Name: SSHAccess
Description: -
    Members: SSH access
Privileges
             ID : ISI_PRIV_LOGIN_SSH
      Read Only : True





             ID : ISI_PRIV_AUTH
      Read Only : False

             ID : ISI_PRIV_ROLE
      Read Only : False

             ID : ISI_PRIV_AUDIT
      Read Only : False

             ID : ISI_PRIV_DEVICES
      Read Only : False

             ID : ISI_PRIV_STATISTICS
      Read Only : False

No Responses!

events found

No Events found!

Top