One Identity Management Console for Unix 2.5.3

To add or modify shell roles

Adding Privilege Manager role based on an existing role

To add a new role based on an existing role

From the PM Policy Editor view, click the Add Role button.
From the Select Role Type dialog, choose Use an existing role as a template for the new role.
Select an existing role to use as the template and click OK.

Refer to Default roles (or profiles) for a description of the roles provided by Privilege Manager for Unix.

Saving policy files

To save a policy file

Click Save to save the policy.
You can also click the (close) icon in the upper-right of the policy panel to close the policy. If you have made changes, you are prompted to save them.

The policy is saved as a new version; not as the version number that you opened.

Note: If the file contains unresolved syntax errors when you click Save, the editor gives you an option to Save with Errors. One Identity recommends that you correct errors before saving to ensure that the policy server does not reject all commands.

The Errors pane is located across the bottom of the Edit Policy view and provides feedback on any errors encountered when you click the Error Check button. While in the text editor, error checking only checks for syntax errors; when in the GUI editor, error checking also checks that the policy is correctly configured to use profile-based (or role based) policy. Double-clicking an error message takes you to the line in question.
Enter a comment describing the changes and click OK to save the latest revision of the policy.
The new version of the policy becomes the latest version in use by Privilege Manager.

Deleting Privilege Manager role

To delete Privilege Manager role

Note: Deleting a role from the policy may prevent users from running commands or completing tasks that are allowed by this role.

One Identity Management Console for Unix 2.5.3 - Administration Guide