newrole

Start a new shell with a specific SELinux role

$ newrole -r [role_name]

$ newrole -t [type_name]

$ newrole -l [s0-s0:c0.c1023]

$ newrole -r [role_name] -t [type_name]

newrole [options]

newrole starts a new shell with a different SELinux security context. It allows users to transition between roles they're authorized to use, enabling role-based access control (RBAC) within SELinux.
SELinux contexts have the format user:role:type:level. The newrole command changes the role and/or type components, which affects what actions the user can perform. Common transitions include switching from a restricted user role to an administrative role.
The user must be mapped to the target role in SELinux policy (see semanage user). Authentication may be required depending on policy configuration.

-r, --role _role_

Specify the new SELinux role

Specify the new SELinux type (domain)

Specify the new SELinux sensitivity level

Preserve environment variables when transitioning

Display version information

Only works on SELinux-enabled systems. The user must be authorized for the target role in SELinux policy. Failed transitions may result in access denials. Use id -Z to verify the current context before and after transition.

runcon(1), semanage-user(8), id(1), seinfo(1)