security login role modify
Modify an access control role
Availability: This command is available to cluster administrators at the admin privilege level.
Parameters
-vserver <vserver name> - Vserver
This optionally specifies the Vserver name associated with the role.
-role <text> - Role Name
This specifies the role that is to be modified.
-cmddirname <text> - Command / Directory
This specifies the command or command directory to which the role has access. To specify the default setting for a role, use the special value "DEFAULT". This value can be modified only for the roles created for the admin Vserver.
[-access <Access>] - Access Level
This optionally specifies a new access level for the role. Possible access level settings are none, readonly, and all. The default setting is
all.
[-query <query>] - Query
This optionally specifies the object that the role is allowed to access. The query object must be applicable to the command or directory name specified by -cmddirname. The query object must be enclosed in double quotation marks (""), and it must be a valid field name.
Examples
The following command modifies an access-control role with the role name readonly and the command access "volume" to have the access level readonly for Vserver vs.example.com:
cluster1::> security login role modify -role readonly -cmddirname volume -access readonly -vserver vs.example.com
