RBAC role
I want to convert a user account to an RBAC role to take advantage of "Least Privilege". What is the best way to set up the role to allow data to be transferred to the server to be used by the role which minimizes software change? Should I leave the application account as is and then create a role for the software? I guess I could use the same group for the role and for the login. I could give the login chown privileges to change ownership of the files to the role. Is this the right direction?
1