Bill Sommerfeld wrote: >> Adopting both of the suggestions above means that >> * root actions can always be attributed to a real user >> * assuming a role is more convenient for users >> * fewer passwords need to be remembered, updated, etc. > > IMHO the biggest benefit is one you failed to mention: > * password sharing between people is never necessary >
In my mind, that was implied by the first bullet, but I should have
explicitly listed it. Thanks.
Scott
