Creating and modifying roles

Roles are created with the mkrole command. Changes to the roles database are effective after they are downloaded to the kernel with the setkst command. You can modify roles with the chrole command.

• Run the following command to create a role:

  mkrole dflt_msg=”My Role” role_name

• To create a role and inherit the authorizations from existing roles, run the following command:

  mkrole rolelist=child_role1,child_role2 role_name

• To modify a role definition, run the following command:

  chrole rolelist=child_role3 role_name