Granting write permission for profile-related tasks
The installer can grant write permission of the appropriate files and directories to a non-root user. The non-root user can then create the profile. The installer can create a group for users who are authorized to create profiles, or the installer can give individual users the authority to create profiles. The following example task shows how to create a group that is authorized to create profiles.
Before you begin
This task assumes a basic familiarity with system commands.
About this task
Procedure
Results
The installer created the profilers group and gave the group proper permissions to certain directories and files to create profiles.
These directories and files are the only ones in the installation root of the product to which a non-root user needs to write to create profiles.
What to do next
The non-root user that belongs to the profilers group can create profiles in a directory that the non-root user owns and to which the non-root user has write permission. However, the non-root user cannot create profiles in the installation root directory of the product.
A non-root user ID can manage multiple profiles. For a given profile, have the same non-root user ID manage the entire profile.
The non-root user can use the same tasks to manage a profile that the root user uses.