Creating Users on ONL (Open Network Linux) with Different Privileges

[pnayek8470]

Hi ONL Team,

I hope this message finds you well. I have a query regarding user management on the Open Network Linux (ONL) system. Specifically, I would like to create two users with distinct privilege levels:

Root User: A user with full administrative privileges, capable of performing all system operations, including modifying system files, installing packages, and managing other users.

Limited User: A user with restricted access, primarily for read-only operations and the ability to execute non-administrative commands. This user should not have the capability to modify critical system settings or files.

Could you please provide guidance on the following:

Creating a Root User:

What are the recommended steps to create a new root user with full administrative privileges?
Are there any specific considerations or best practices we should follow?
Creating a Limited User:

How can we create a user with restricted access, ensuring they only have read and basic execution permissions?
Is there a recommended way to prevent this user from gaining elevated privileges (e.g., preventing sudo access)?
User Permissions Configuration:

How can we configure file and directory permissions to further restrict the limited user's capabilities?
Are there any additional configurations or tools available within ONL to manage user permissions effectively?
Testing and Verification:

What are the best practices for testing and verifying that the users have the correct privileges and access levels?
Any documentation or examples you can provide would be greatly appreciated. We want to ensure that we follow the best practices for security and system integrity.

Looking forward to your guidance.

Best regards,
Pratik Nayek
Capgemini India
Software Frameworks and Solutions Team