accesslocal(4)

NAME
accesslocal - local administration access rule for SunScreen configuration

DESCRIPTION
An accesslocal object describes who can administer the SunScreen locally as well as what they can do. It is manipulated via the configuration editor or SunScreen administration GUI.

A given user is given permissions via the PERMISSION keyword followed by one of these values: ALL, WRITE, READ, STATUS, NONE. The default permission level is NONE..

ALL allows the administrator all the permission of WRITE, plus the ability to modify administrative accesslocal and accessremote Rules.

WRITE allows the administrator to read and write all data, except administrative accesslocal and accessremote Rules.

READ allows the administrator to read all data, but not modify any of it.

STATUS allows the administrator to see status and informational data, but not policy data.

All accesslocal may have an optional COMMENT field associated with them which is a 256-character or less user-provided comment.

All accesslocal may be optionally associated with a specific SCREEN object. If an accesslocal is so associated, it will only allows the indicated administrator to administer the specified SCREEN with which it is associated.

An accesslocal entry is uniquely identified by its position in the list of accesslocal entries. This numeric position is its identity regradless of any association with a SCREEN object. This identity may change as other accesslocal entries are added to the list.

SEE ALSO
ssadm-edit(1M), accessremote(4), authuser(4), screen(4)