Fujitsu SPARC M12-1 Installation Manual page 99

Note - When a user with the useradm privileges specifies another user's account, the
password can be specified regardless of the set value in the setpasswordpolicy(8) command.
The following example specifies 60 days for the expiration time and 15 days
ahead as the start date for warnings before the password expires.
XSCF> password -M 60 -w 15 jsmith
Execute the setprivileges command to assign a user privilege to the user
3.
account.
The setprivileges command can set the following as user privileges for the entire
system.
Table 6-3 User Privileges
User Privilege Overview
platadm Manage the whole
system.
useradm Manage user
accounts.
auditop Refer to the audit
status.
auditadm Control auditing.
fieldeng Allow use by field
engineers.
The following example specifies useradm and platadm for the user account.
XSCF> setprivileges jsmith useradm platadm
Note - The setprivileges command assigns the user privilege of the specified operand.
To add a new user privilege to a user account already assigned a user privilege, specify the
existing user privilege too.
Description of Privilege
- Can perform all hardware operations for
the system.
- Can manipulate all XSCF settings except
those requiring the useradm and XSCF
audit privileges.
- Can add/delete hardware in a PPAR.
- Can perform power operations for a
physical partition.
- Can refer to all of the status of the server.
- Can create, delete, enable, and disable user
accounts.
- Can change user passwords and password
profiles.
- Can change user privileges.
Can refer to the XSCF audit status and audit
methods.
- Can control XSCF auditing.
- Can delete XSCF audit methods.
Permits field engineers to only be able to
perform maintenance work and change
device configurations.
Chapter 6 Making the Initial System Settings 89