User-defined-role overview

A user-defined role starts from a basic set of privileges which are then refined by adding rules. You assign a name to the role and then associate the role to one or more user accounts.

The following tools are available for managing user-defined roles:

• The role command defines new roles and deletes user-defined roles.
• The rule command allows you to specify access rules for specific operations and assign these rules to a given role.
• The username command associates a given user-defined role with a specific user account.