To authorize users to run SFDB commands, perform the following step as the root user

• Use the -o auth_user option of the sfae_auth_op command and provide the user name as an argument to the -u option.

  # /opt/VRTS/bin/sfae_auth_op \
  -o auth_user -u db2inst1
  Creating principal db2inst1@sys1.example.com

With an off-host setup in which the off-host node is not part of the same cluster, use an additional -h option and perform the following steps:

1. On each primary node or nodes, which are part of a cluster, add -h off-host hostname to the sfae_auth_op command, for example:

   # /opt/VRTS/bin/sfae_auth_op -o auth_user -u oragrid -h myoffhost
   Creating principal oragrid@dblxx64-2-v6.vxindia.veritas.com

2. On the off-host node, add -h primary node to the sfae_auth_op command, for example:

   # /opt/VRTS/bin/sfae_auth_op -o auth_user -u oragrid -h dblxx64-2-v6
   Creating principal oragrid@myoffhost.vxindia.veritas.com