modify_acl (Application Control and Management)--Replace Portion of Application ACL

Replace that portion of the application ACL which relates to the owner or a principal.

application modify_acl <name> [ <principal>=owner ] [ <principal1>=<val1> ... <principalN>=<valN> ] [ template=<name> ] [ --test_only ]

<principal>=owner

Set the owner attribute of the application ACL to the specified principal.

<principal>=<val>

Add or replace the specified principal in the application ACL with access level <val>. <principal> is in the following form:

<name>: Local user or group.
/<name>: Global user or group
<scope>:<type>:<name>: A fully qualified principal name where <scope> is 'global' or 'local', <type> is 'group' or 'user', and <name> is the group or user name. Valid access levels are: read, control, configure and full. If the access level is specified as 'none' the principal is removed from the application ACL if it is present.

template=<name>

Replace the principal entries of the application ACL with those of the specified template application.

--test_only

Do not replace any portion of the application ACL but rather test if the operation can succeed.

application modify_acl my-app local:user:admin=full

Replace that portion of the 'myapp' application ACL which relates to the local user 'admin', providing full access level permissions to this user.

application modify_acl my-app admin=full

Replace that portion of the 'myapp' application ACL which relates to the local user 'admin', providing full access level permissions to this user.

Specified local user and group principals must exist.
Specified global user principals must have logged in to the grid at some time in the past.
Specified global group principals must be associated to a global user who has logged in to the grid at some time in the past.