CLI Cookbook: How to Create or Edit a Privilege Elevation Profiles and Profile Scripts
Reference / Command Line Interface Guide / CLI Cookbook: Common Workflows, Tasks, and Examples / CLI Cookbook: Hosts and Environments / CLI Cookbook: How to Create or Edit a Privilege Elevation Profiles and Profile Scripts

Background:

This procedure is only supported in Delphix Engine versions 5.0 and newer, if you are running a previous version please contact your Professional Services representative.

The default domain user created on Delphix Engines is now admin instead of delphix_admin. When engines created before 5.3.1 are upgraded to 5.3.1 or later they will retain their old username 'delphix_admin'. To avoid complications Delphix recommends creating users with an admin role and then Disabling delphix_admin.


Procedure for Creating an Elevation Profile:

  1. Log into the CLI using delphix_admin or a user with Admin privileges and got to 'Host'. 

    ssh admin@yourengine
yourengine > host

  2. Select privilegeElevation then profile. 

    yourengine host > privilegeElevation
yourengine host privilegeElevation > profile

  3. Set the name of the profile and the version of the profile. 

    yourengine host privilegeElevation profile *> set name=<profilename>
yourengine host privilegeElevation profile *> set version=<profileversion>

  4. Commit the profile to save it. 

    yourengine host privilegeElevation profile *> commit

Procedure for creating a profileScript

Please note that you will need to create the script yourself or with the help of the Professional Services team.

  1. Log into the CLI using delphix_admin or a user with Admin privileges and got to 'Host'. 

    ssh delphix_admin@yourengine
yourengine > host

  2. Select privilegeElevation then profileScript. 

    yourengine host > privilegeElevation
yourengine host privilegeElevation > profileScript

  3. Create your script by setting, name, contents and profile (this can be your previously created profile or the default sudo).

    yourengine host privilegeElevation profileScript > create
yourengine host privilegeElevation profileScript *> set name=<scriptname>
yourengine host privilegeElevation profileScript *> set contents=<your script>
yourengine host privilegeElevation profileScript *> set profile=<yourprofile>

  4. Commit to save. 

    yourengine host privilegeElevation profileScript *> commit

Related Links