This question already has an answer here:
Ok, in our environment, most users (including myself as one of the unix admins) don't actually have admin rights directly on the aix servers. We login to a front unix server as ourselves without root access. Then we run a command that logs us in as the actual root user but everything we do is logged to a text file, so if we really screw something up, there are logs to point fingers at who did it. I can't login directly to the unix servers. I don't have access. I have to login to the logging server, then ssh to the server as direct root.
Well, I have a request right now that two users that know absolutely nothing about how to navigate a unix command prompt needs access to some log files 3 folders deep.
We're going to make it so they're going to log directly into the unix box with the log files, so they don't go through the server that logs all their command history. But our plan is to create them as basic users with no administrative access. Then they're actually going to access the files using a GUI utility to just copy and paste the files to their Windows machines.
The permissions on this server without making any modifications look like this already...
So, if I create two users on the box and make them part of no security groups, they should already be able to navigate down to the folder no problem because everyone has read access down to the log files.
But, what we want is something super simple for these two non-unix experienced users. I've been working this job as a unix admin for about 3 months. I've taken a lot of unix classes but most of my professional experience is in Windows servers. I know in a Windows environment, I'd just share out the logs folder. The user, if wanted to experiment, might notice they could access the parent folder, but probably wouldn't know enough to try it.
Is there a way in an AIX unix environment to just somehow share the logs folder out so the users don't have to drill down to the logs folder and possibly get lost or access something they shouldn't access? I'm not changing the permissions. I've been working for this company for 3 months and a multi-million dollar enterprise doesn't like me telling them what they've been doing for the last 20 years is wrong and they should change it. So, I have to make work what they already have in place.