You can create a new role and grant desired capabilities to the role.
role_name is the name of the role you want to create. Role names are case insensitive and can be 1-32 characters.
comments is a short string you can use to document this role.
The capability parameters are the types of access you want to grant to this new role.
You can also grant API capabilities for API command families. For example, to grant the myrole role only the capability to run CIFS commands, you use the following command:
The capabilities allowed for the specified role are listed.