security login role modify
Modify an access control role
Availability: This command is available to cluster administrators at the admin privilege level.
security login role modify command modifies an access-control role.
-vserver <Vserver Name>- Vserver
This optionally specifies the Vserver name associated with the role.
-role <text>- Role Name
This specifies the role that is to be modified.
-cmddirname <text>- Command / Directory
This specifies the command or command directory to which the role has access. To specify the default setting for a role, use the special value
"DEFAULT". This value can be modified only for the roles created for the admin Vserver.
[-access <Access>]- Access Level
This optionally specifies a new access level for the role. Possible access level settings are none, readonly, and all. The default setting is
[-query <query>]- Query
This optionally specifies the object that the role is allowed to access. The query object must be applicable to the command or directory name specified by -cmddirname. The query object must be enclosed in double quotation marks (""), and it must be a valid field name.
The following command modifies an access-control role with the role name readonly and the command access "volume" to have the access level readonly for Vserver vs.example.com:
cluster1::> security login role modify -role readonly -cmddirname volume -access readonly -vserver vs.example.com