How to add auth RBAC to a user in Solaris 10 ?

Please have a look at the following docs:
http://www.softpanorama.org/Solaris/Security/solaris_rbac.shtml
http://www.samag.com/documents/s=7667/sam0213c/0213c.htm
 http://www.sun.com/software/whitepapers/wp-rbac/wp-rbac.pdf
http://rabbs.com/rbac.pdf
http://docs.sun.com/app/docs/doc/817-0365/6mg5vpmdo?a=view
 
and the links in: http: Q_21910191.html
 

I am getting problem to understand this concept specially the 'auth' part.
We already have system defined authorization like solaris.system.shutdown in /etc/security/auth_attr

but still I had to manually define a profile which auth the profile in /etc/security/prof_attr and later defined a associated command like /usr/sbin/poweroff in /etc/security/exec_attr for the named profile.

and after doing all this, I created a new role and with just defined profile and assigned to a user. and then I got the expected result


My whole concern is why we have predefined authorization, and how to use that in simple way.
I just noticed we too have '-A (authorization)' option in useradd comamnd, how can I simply allow a user to assign specific authorization.

also my another curiosity is how can I find out which(how many) commands are associated with auth 'solaris.jobs.admin'
I just guess that 'contab' should be working but is there way I can get a list of command which support auth 'solaris.jobs.admin' ??

try this command
usermod -u UID -R rolename

to put the changes into effect
svcadm restart system/name-service-cache

I am getting problem to understand the 'auth' in RBAC, please let me know if some example satisfy my curiosity.

Thank you! :)