> > > More detail about the SMF RBAC integration is in smf_security(5), but > the default usage should already achieve what you're looking for.
Liane is correct. This is explained quite nicely in the smf_security man page. If you would like some examples, see http://mediacast.sun.com/users/netherton/media/SMF_in_a_Day.pdf starting around page 102. The authorizations (value, modify, read) can be assigned at the property group level so you could have multiple users modifying different groups of service properties - although that does begin to get a bit complicated. All it takes is the proper authorization which you can pass out like movie tickets. Apparently I need to update my materials for the read_authorization. Bob