HP-UX System Administrator's Guide: Routine Management Tasks

# ( unset DISPLAY ; /usr/sbin/ugweb )
Giving Users Limited Access to Text-Based HP SMH
As system administrator, you can give limited text-based HP SMH access to
non-superusers individually by user name and collectively by primary group name.
NOTE: The privileges assigned to users and groups by the text-based restricted HP
SMH do not apply to the web-based HP SMH.
1. Activate Restricted HP SMH.
# /usr/sbin/smh -r
2. You can assign text-based HP SMH privileges by user and by group. You can
toggle between the lists of defined users and groups with the u and g keys,
respectively.
3. To select a user or group, move the highlight to that entry and press Enter. The
list of text-based HP SMH areas is displayed.
Resource Manager
Disks and File Systems Display
Kernel Configuration
Printers and Plotters
Networking and Communications
Peripheral Devices
Security Attributes Configuration Software Management
Auditing and Security
Accounts for Users and Groups
4. Choose one of the following:
• To assign an area, highlight it and press e.
• To assign all areas, press E.
• To disable an area, highlight it and press d.
• To disable all areas, press D.
You can repeat these operations in any combination. The changes are displayed
each time you press a key.
5. Press s to save the changes.
6. Press Esc to return to the previous screen.
7. Press x to exit from the program.
User and group privileges are managed separately. Group privileges apply to all users
for which it is their primary group, as shown in /etc/passwd. A user can acquire a
privilege individually, through its group, or both.
When privileged users run /usr/sbin/smh, they run text-based HP SMH. They have
superuser status in the defined areas and will only see those HP SMH areas in the
menu. All other areas of HP SMH are hidden. When users without special access to
34 Introduction