Creating User account with limited permission

Hi All,

I want to create an user account which can only excute "df -kh" and "prstat -a" command. The user will not be able to perform "rm" and other critical commands.

Is there a way to do it?

rgds,
Ronny

You can use RBAC role based access control. By doing so, you can specify in the config file the couple of commands which can be executed by the userid.
Check docs.sun.com for instructions

RBAC doesn't allow to restrict options used though. I guess sudo might be here a better answer.