zfs discuss - Aug 2011 - RBAC and zfs

i would like to create a role which can take snapshots, run zfs send and zfs
receive. the user switches to that role and has permissions to run those
commands on a pool
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20110826/6f7177db/attachment.html>

On 08/26/11 13:29, cephas maposah wrote:
> i would like to create a role which can take snapshots, run zfs send and
> zfs receive. the user switches to that role and has permissions to run
> those commands on a pool
See the zfs(1M) man page for the section on the ''allow''
subcommand.

Assuming a role name of ''myrole'' and a ZFS pool called
''tank'' it would
be something like this:

# roleadd -R myrole
# passwd myrole
...
# useradd -R myrole cephas

# zfs allow -u myrole send,receive,snapshot,mount tank

-- 
Darren J Moffat