I think I have most of the needed privileges.  ISI_PRIV_DEVICES ISI_PRIV_SYS_SUPPORT ISI_PRIV_STATISTICS ISI_PRIV_EVENT  That should get you everything except possibly isi job events list. I’m not sure there is one for that. You may need to file a feature request with support for that.  — Adam Fox Advisory SE, Emerging Technology Division adam.fox[NAME].com // 919-606-0911
Have a production cluster (7.1.0.3) that needs to be monitored by Microsoft Systems Center Operations Manager (aka SCOM) Via the GUI I created a user in SYSTEM (which is joined to our domain), LOCAL provider.  isi-scnode-1# isi auth users view scom                     Name: scom                       DN: CN=scom,CN=Users,DC=ISI-SCNODE               DNS Domain: -                   Domain: ISI-SCNODE                 Provider: lsa-local-provider:System         Sam Account Name: scom                      UID: 2002                      SID: S-1-5-OICU812-1002                  Enabled: Yes                  Expired: No                   Expiry: -                   Locked: No                    Email: -                    GECOS: -            Generated GID: No            Generated UID: No            Generated UPN: Yes            Primary Group                           ID : GID:1544                         Name : Administrators           Home Directory: /ifs/home/scom         Max Password Age: 4W         Password Expired: No          Password Expiry: 2014-11-20T14:53:09        Password Last Set: 2014-11-06T10:20:37         Password Expires: No                    Shell: /bin/zsh                      UPN: scom[NAME]-SCNODE User Can Change Password: Yes   Via CLI I did ran these commands so that account can Log in vis SSH  isi auth roles create scomssh isi auth roles modify scomssh --add-priv ISI_PRIV_LOGIN_SSH isi auth roles modify scomssh --add-group Administrators isi auth roles members list --role=scomssh  isi-scnode-1# isi auth roles members list --role=scomssh Type  Name -------------------- group Administrators -------------------- Total: 1  isi-scnode-1# isi auth roles privileges list scomssh ID ------------------- ISI_PRIV_LOGIN_SSH ------------------- Total: 1 isi-scnode-1# isi auth roles list Name ------------- SecurityAdmin SystemAdmin AuditAdmin VMwareAdmin scomssh ------------- Total: 5 isi-scnode-1#    Now that user account can log in via SSH I'm now being asked to ensure they can run these commands.   I am NOT a CLI guru, so I'm struggling a bit.  Thanks in advance.
How do I grant permission to a local user to run certain commands?