PowerScale OneFS 9.3.0.0 CLI Administration Guide

Create and modify a custom role

You can create an empty custom role and then add users and privileges to the role.

1. Establish an SSH connection to any node in the cluster.
2. Run the following command to create a role, where <name> is the name that you want to assign to the role and <string> specifies an optional description:

   isi auth roles create <name> [--description <string>]

3. Run the following command to add a user to the role, where <role> is the name of the role and <string> is the name of the user:

   isi auth roles modify <role> [--add-user <string>]

   NOTE: You can also modify the list of users assigned to an integrated role.
4. Run the following command to add a privilege with read access to the role, where <role> is the name of the role and <string> is the name of the privilege:

   isi auth roles modify <role> [--add-priv-read <string>]

5. Run the following command to add a privilege with write access to the role, where <role> is the name of the role and <string> is the name of the privilege:

   isi auth roles modify <role> [--add-priv-write <string>]

6. Run the following command to add a privilege with execute access to the role, where <role> is the name of the role and <string> is the name of the privilege:

   isi auth roles modify <role> [--add-priv-execute <string>]

7. Run the following command to add a privilege with no permission to the role, where <role> is the name of the role and <string> is the name of the privilege:

   isi auth roles modify <role> [--add-priv-noperm <string>]