Management Access Rights from non global Zone

We have a Sun Cluster 3.2 on Solaris 10. The Managed Resources are Solaris Zones:

e.g Resgroup xx

- xx-hasp (Storage for the Zone Root)

- xx-lh (the Service Address for the zone)

- xx-sczbt (the Zone boot Resource)

- xx-sczsmf (a managed SMF Service in the Zone)

How do i allow an arbitrary non root user or group inside the zone xx allow to disable the monitor of the resource xx-sczsmf so he can for example perform maintenance on it?

I have a few restrictions:

- the user has no account in the global zone

- the user may be allowed to manage all resources which belong to his zone

- the user is not allowed to manage any resource of another zone.

I guess solaris.cluster.resource.admin will not do the trick :-(

Fritz

[805 byte] By [Tom_Tigera] at [2007-11-26 22:32:08]