adminLinux Users Groups and Sudo Checklist for RHCSA
User and group management is a core RHCSA skill. System admins must create users, assign groups, manage passwords, control sudo access and understand how identity affects file ownership and service access.
Core principle
Linux access control starts with identity. A user owns processes and files. A group shares access. Sudo grants controlled administrative power.
Checklist
- Create a normal user.
- Create a group.
- Add a user to a group.
- Set or reset a password.
- Check user ID and group ID.
- Review /etc/passwd and /etc/group.
- Grant sudo access through a group when appropriate.
- Switch users safely.
- Lock or remove unused accounts.
- Verify file ownership after user changes.
Reusable lesson
This applies to server access, deployment users, WordPress file ownership, service users, database users and least privilege design.
When to Use This Checklist
Use this checklist when practicing Linux user, group and sudo management for RHCSA and real system administration.
Required Tools
Linux VM, root or sudo access, test users, terminal, /etc/passwd, /etc/group, sudoers policy
Before You Start
Do not give sudo access casually. Admin rights should be intentional and documented.
Structured Checklist Steps
- Create user.
- Create group.
- Add user to group.
- Set password.
- Check identity.
- Read passwd and group files.
- Grant sudo carefully.
- Switch user.
- Lock unused account.
- Verify ownership.
Verification Steps
- User can log in if intended.
- Group membership is correct.
- Sudo access works only where intended.
- Unused accounts are locked or removed.
- File ownership matches access design.
Rollback Plan
If user or sudo changes block access, use root or console recovery to restore the previous group membership or sudoers configuration.
Common Mistakes
- Giving sudo to every user.
- Deleting users without checking owned files.
- Editing sudoers without validation.
- Forgetting supplementary groups.
- Confusing user ownership with group access.
Related Commands
sudo useradd -m operator
sudo passwd operator
sudo groupadd webops
sudo usermod -aG webops operator
id operator
getent group webops
sudo usermod -aG wheel operator
su - operator
sudo passwd -l operator