This post is more than 5 years old
1 Rookie
•
16 Posts
1
9370
December 13th, 2013 15:00
What privledge does a custom RBAC role need to run isi_for_array?
In the example below I am logged in as a user that is a member of a group named SSH Access. SSH Access is a member of custom role SSHAccess. Sorry for the close naming convention. I tried running with and without sudo and I am denied.
Isilon OneFS v7.1.0.0
Demo7-1-1% isi_for_array -s isi devices
zsh: permission denied: isi_for_array
Demo7-1-1% sudo isi_for_array -s sudo isi devices
We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:
#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.
Password:
Sorry, user stati-user is not allowed to execute '/usr/bin/isi_for_array -s sudo isi devices' as root on Demo7-1-1.
Demo7-1-1% sudo isi_for_array sudo isi devices
Password:
Sorry, user stati-user is not allowed to execute '/usr/bin/isi_for_array sudo isi devices' as root on Demo7-1-1.
Privileges assigned to SSHAccess role
Demo7-1-1% isi auth roles view --role=SSHAccess
Name: SSHAccess
Description: -
Members: SSH access
Privileges
ID : ISI_PRIV_LOGIN_SSH
Read Only : True
ID : ISI_PRIV_AUTH
Read Only : False
ID : ISI_PRIV_ROLE
Read Only : False
ID : ISI_PRIV_AUDIT
Read Only : False
ID : ISI_PRIV_DEVICES
Read Only : False
ID : ISI_PRIV_STATISTICS
Read Only : False
events found

