Quote: "The derived manifest script can run commands to read system attributes. AI runs the script as
role aiuser. The aiuser role has all the privileges
of a non-privileged user plus the following additional privileges:solaris.network.autoconf.read,solaris.smf.read.*
The aiuser role is non-privileged except that it
can read more information from the system than other non-privileged users.
The aiuser role cannot change the system."