security login role modify

Modify an access control role

Availability: This command is available to cluster administrators at the admin privilege level.


The security login role modify command modifies an access-control role.


-vserver <Vserver Name> - Vserver
This optionally specifies the Vserver name associated with the role.
-role <text> - Role Name
This specifies the role that is to be modified.
-cmddirname <text> - Command / Directory
This specifies the command or command directory to which the role has access. To specify the default setting for a role, use the special value "DEFAULT". This value can be modified only for the roles created for the admin Vserver.
[-access {none|readonly|all}] - Access Level
This optionally specifies a new access level for the role. Possible access level settings are none, readonly, and all. The default setting is all.
[-query <query>] - Query
This optionally specifies the object that the role is allowed to access. The query object must be applicable to the command or directory name specified by -cmddirname. The query object must be enclosed in double quotation marks (""), and it must be a valid field name.


The following command modifies an access-control role with the role name readonly and the command access "volume" to have the access level readonly for Vserver
cluster1::> security login role modify -role readonly -cmddirname volume -access readonly -vserver